[BusyBox] Patch for extended SUID managment

[Robert Griebl]

I habe discussed my first approach to tinylogin integration with vodz and 
this patch is the result (of which we both think it is a nice solution =) )

The approach is similiar to current tinylogin SUID managment - add a field to 
each BB_applet, specifing if this applet requires SUID, doesn't care if it is 
run SUID or does not want to be run SUID (ALWAYS, MAYBE, NEVER)

Additionally you can enabled CONFIG_FEATURE_SUID_CONFIG. This enabled runtime 
configuration via /etc/busybox.conf. This file is parsed like a INI file. 
Currently only the section [SUID] is recognized. In this section you can 
entries to override the compiled in SUID behaviour like:
<applet>[ ]*=[ ]*(n|m|a[ ]+[euid][ ]+[egid])

Examples:
-->8------------------------------8<--
[SUID]
# comment
su=a 0 0  # su now requires SUID and tries to set euid/egid to root/root
ping=m    # ping does not really care, but also does not drop priv.
ash=a 500 # ash now runs as user with uid==500 even when bb binary 
            is SUID root
mount=n   # mount now always drops all priviledges, regardless of compile     
            time config

[This]
# is ignored
-->8------------------------------8<--

So IMHO for small embedded systems, the compile time options will suffice. 
For more sophisticated usage you can activate the CONFIG and set everything 
in /etc/busybox.conf

Comments anybody :) ??

-- 
cu
Robert

--
Real programmers dont write documentation -
leave that to the maintenance people.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: suid.patch2
Type: text/x-diff
Size: 6965 bytes
Desc: not available
Url : http://lists.busybox.net/pipermail/busybox/attachments/20020523/da504072/attachment.bin