CONFIG_FEATURE_SUID and login
John Kelly
jakelly at shtc.net
Mon Oct 31 20:17:35 UTC 2005
With busybox 1.00 (and busybox snapshot 20051030), the login applet
forces CONFIG_FEATURE_SUID, and the help text for login says "note
that Busybox binary must be setuid root for this applet to work
properly."
Is this a config/docementation bug?
When busybox is not suid root, I can still log in as a non-root user,
no matter whether busybox is configured for internal passwd and group
functions, or system passwd and group functions.
-rwxr-xr-x 127 root root 324500 Oct 31 14:51 /bin/busybox
-rwxr-xr-x 8 root root 34704 Oct 31 14:51 /bin/busybox.suid
-rwxr-xr-x 8 root root 34704 Oct 31 14:51 /bin/login
-rw-r--r-- 1 root root 537 Oct 31 14:53 /etc/passwd
-rw------- 1 root root 397 Oct 31 14:53 /etc/shadow
More information about the busybox
mailing list