[git commit] vconfig: make it NOEXEC

Denys Vlasenko vda.linux at googlemail.com
Wed Aug 9 16:52:19 UTC 2017


commit: https://git.busybox.net/busybox/commit/?id=a4d4ab04c3706af1cb2f65fb00c96d3ccba1020c
branch: https://git.busybox.net/busybox/commit/?id=refs/heads/master

Signed-off-by: Denys Vlasenko <vda.linux at googlemail.com>
---
 NOFORK_NOEXEC.lst    | 2 +-
 networking/vconfig.c | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index bfb76a1..063d7cd 100644
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -400,7 +400,7 @@ users - noexec. nofork candidate(is getutxent ok?)
 usleep - NOFORK
 uudecode - runner
 uuencode - runner
-vconfig - leaks: xsocket+ioctl_or_perror_and_die
+vconfig - noexec. leaks: xsocket+ioctl_or_perror_and_die
 vi - interactive, longterm
 vlock - suid
 volname - hardware (reads CDROM, this can take long-ish if need to spin up)
diff --git a/networking/vconfig.c b/networking/vconfig.c
index e6e2872..62a4838 100644
--- a/networking/vconfig.c
+++ b/networking/vconfig.c
@@ -16,7 +16,7 @@
 //config:	help
 //config:	Creates, removes, and configures VLAN interfaces
 
-//applet:IF_VCONFIG(APPLET(vconfig, BB_DIR_SBIN, BB_SUID_DROP))
+//applet:IF_VCONFIG(APPLET_NOEXEC(vconfig, vconfig, BB_DIR_SBIN, BB_SUID_DROP, vconfig))
 
 //kbuild:lib-$(CONFIG_VCONFIG) += vconfig.o
 


More information about the busybox-cvs mailing list