[BusyBox] Division of work.

[Vladimir N. Oleynik]

Alex King wrote:

> I think the problem is that vlad wants admins in wheel group to be able
> to be able to reboot the system.  If reboot drops perms, they won't be
> able to, if it doesn't then anyone can "busybox reboot".
> 
> Personally I think that the build system should be able to build an
> arbitary number of executables, eg, one non-suid, cat, ls etc., one
> suid; ping etc, and another could be suid root and executable only by
> wheel; reboot etc.  With shared libs, this need not have that much
> overhead.  Nor does it mean your idea for a flag to test for dropping
> permissions is a bad idea: this could be an alternative way for those
> who want a single busybox, perhaps staticly linked.

Thank. You have understood a problem completely. 

I think, that is unique working variant (which I already sounded repeatedly) is
not-suid
busybox and the generator suid-wrappers in runtime. 
Yes, on everyone suid-applet we shall lose inode and insignificant volume of a
disk 
(~1 block). But the problem will be solved.  


--w
vodz