[git commit] brctl: make it NOEXEC
Denys Vlasenko
vda.linux at googlemail.com
Sun Aug 6 18:14:02 UTC 2017
commit: https://git.busybox.net/busybox/commit/?id=86e07f6893cfe94a4a7c4aba4b643752808d4235
branch: https://git.busybox.net/busybox/commit/?id=refs/heads/master
Signed-off-by: Denys Vlasenko <vda.linux at googlemail.com>
---
NOFORK_NOEXEC.lst | 2 +-
networking/brctl.c | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index 97b7d8b..dc28280 100644
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -53,7 +53,7 @@ blkdiscard
blkid
blockdev - noexec. leaks fd
bootchartd - daemon
-brctl
+brctl - noexec
bunzip2 - runner
busybox
bzcat - runner
diff --git a/networking/brctl.c b/networking/brctl.c
index 690791e..5d5f0af 100644
--- a/networking/brctl.c
+++ b/networking/brctl.c
@@ -39,7 +39,7 @@
//config: Add support for option which prints the current config:
//config: show
-//applet:IF_BRCTL(APPLET(brctl, BB_DIR_USR_SBIN, BB_SUID_DROP))
+//applet:IF_BRCTL(APPLET_NOEXEC(brctl, brctl, BB_DIR_USR_SBIN, BB_SUID_DROP, brctl))
//kbuild:lib-$(CONFIG_BRCTL) += brctl.o
More information about the busybox-cvs
mailing list