[git commit] vconfig: make it NOEXEC
Denys Vlasenko
vda.linux at googlemail.com
Wed Aug 9 16:52:19 UTC 2017
commit: https://git.busybox.net/busybox/commit/?id=a4d4ab04c3706af1cb2f65fb00c96d3ccba1020c
branch: https://git.busybox.net/busybox/commit/?id=refs/heads/master
Signed-off-by: Denys Vlasenko <vda.linux at googlemail.com>
---
NOFORK_NOEXEC.lst | 2 +-
networking/vconfig.c | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index bfb76a1..063d7cd 100644
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -400,7 +400,7 @@ users - noexec. nofork candidate(is getutxent ok?)
usleep - NOFORK
uudecode - runner
uuencode - runner
-vconfig - leaks: xsocket+ioctl_or_perror_and_die
+vconfig - noexec. leaks: xsocket+ioctl_or_perror_and_die
vi - interactive, longterm
vlock - suid
volname - hardware (reads CDROM, this can take long-ish if need to spin up)
diff --git a/networking/vconfig.c b/networking/vconfig.c
index e6e2872..62a4838 100644
--- a/networking/vconfig.c
+++ b/networking/vconfig.c
@@ -16,7 +16,7 @@
//config: help
//config: Creates, removes, and configures VLAN interfaces
-//applet:IF_VCONFIG(APPLET(vconfig, BB_DIR_SBIN, BB_SUID_DROP))
+//applet:IF_VCONFIG(APPLET_NOEXEC(vconfig, vconfig, BB_DIR_SBIN, BB_SUID_DROP, vconfig))
//kbuild:lib-$(CONFIG_VCONFIG) += vconfig.o
More information about the busybox-cvs
mailing list