[git commit] brctl: make it NOEXEC

Denys Vlasenko vda.linux at googlemail.com
Sun Aug 6 18:14:02 UTC 2017


commit: https://git.busybox.net/busybox/commit/?id=86e07f6893cfe94a4a7c4aba4b643752808d4235
branch: https://git.busybox.net/busybox/commit/?id=refs/heads/master

Signed-off-by: Denys Vlasenko <vda.linux at googlemail.com>
---
 NOFORK_NOEXEC.lst  | 2 +-
 networking/brctl.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index 97b7d8b..dc28280 100644
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -53,7 +53,7 @@ blkdiscard
 blkid
 blockdev - noexec. leaks fd
 bootchartd - daemon
-brctl
+brctl - noexec
 bunzip2 - runner
 busybox
 bzcat - runner
diff --git a/networking/brctl.c b/networking/brctl.c
index 690791e..5d5f0af 100644
--- a/networking/brctl.c
+++ b/networking/brctl.c
@@ -39,7 +39,7 @@
 //config:	Add support for option which prints the current config:
 //config:		show
 
-//applet:IF_BRCTL(APPLET(brctl, BB_DIR_USR_SBIN, BB_SUID_DROP))
+//applet:IF_BRCTL(APPLET_NOEXEC(brctl, brctl, BB_DIR_USR_SBIN, BB_SUID_DROP, brctl))
 
 //kbuild:lib-$(CONFIG_BRCTL) += brctl.o
 


More information about the busybox-cvs mailing list