stand-alone, but static linked applets
Laurent Bercot
ska-dietlibc at skarnet.org
Sun Nov 11 14:04:00 UTC 2012
>> another advantage of separate binaries is that you can set suid root on
>> only the few that actually need it.
> ttylinux do this by compiling busybox twice.
For the record, I use a suid root wrapper with a compiled-in list of
applets for which it is actually ok to run as suid root. Only one busybox
compilation is necessary.
However, for security reasons, the setuid wrapper has to directly execve()
the full path to the busybox binary, so said binary is not relocatable.
--
Laurent
More information about the busybox
mailing list