stand-alone, but static linked applets

Laurent Bercot ska-dietlibc at skarnet.org
Sun Nov 11 14:04:00 UTC 2012


>> another advantage of separate binaries is that you can set suid root on 
>> only the few that actually need it.
> ttylinux do this by compiling busybox twice.

 For the record, I use a suid root wrapper with a compiled-in list of
applets for which it is actually ok to run as suid root. Only one busybox
compilation is necessary.
 However, for security reasons, the setuid wrapper has to directly execve()
the full path to the busybox binary, so said binary is not relocatable.


-- 
 Laurent


More information about the busybox mailing list