Help needed in disabling busybox configuration for linux hardening requirement.

[Isaac Dunham]

On Sat, Oct 10, 2015 at 05:41:44PM +0530, purushi1 . wrote:
> Hi,
> 
> Thanks for the response.
> I have attached the modified "whitelist.busybox-small" configuration file .

(which is the .config you use for building Busybox, I presume).


> It throws me the following error:
> 
> ==================================================
> /projects/cc-ban-vwstg4/purush/TOOLCHAIN/stbgcc-4.5.4-2.9/bin/../lib/gcc/mipsel-linux-uclibc/4.5.4/../../../../mipsel-linux-uclibc/bin/ld:
> can not make stub section: File format not recognized
> /projects/cc-ban-vwstg4/purush/TOOLCHAIN/stbgcc-4.5.4-2.9/bin/../lib/gcc/mipsel-linux-uclibc/4.5.4/../../../../mipsel-linux-uclibc/bin/ld:
> failed to set dynamic section sizes: File format not recognized
> collect2: ld returned 1 exit status
> Makefile:716: recipe for target 'busybox_unstripped' failed
> make[5]: *** [busybox_unstripped] Error 1
> make[5]: Leaving directory
> '/projects/cc-ban-vwstg4/purush/KERNEL/3.3-3.4/Trial3/uclinux-rootfs/user/busybox'
> makefile:25: recipe for target 'all' failed
> make[4]: *** [all] Error 2
> make[4]: Leaving directory
> '/projects/cc-ban-vwstg4/purush/KERNEL/3.3-3.4/Trial3/uclinux-rootfs/user/busybox'
> Makefile:344: recipe for target 'all' failed
> make[3]: *** [all] Error 2
> make[3]: Leaving directory
...
which says a few things:
-you are using uclinux+uclibc for mipsel with GCC 4.5.4, specificallly
stbgcc (Broadcom's toolchain).
-this is a *link* error.
-this is the tail of a multi-level make that dies in busybox; no one here
has any idea what project is further up in this tree.
-you started your snip of the error just *after* the commandline that
it arose in.
If you see ".../command: error: problem", an important bit of information
is how that command got run; please provide at least the command that starts
with the invocation:
/projects/..../mipsel-linux-uclibc/bin/ld ...



> If I add the following configurations, then it works fine
> 
> CONFIG_BRCTL=y
> CONFIG_FEATURE_BRCTL_FANCY=y
> CONFIG_FEATURE_BRCTL_SHOW=y


Thanks,
Isaac