[PATCH] su: support numeric UIDs with a -n flag
spareproject776
spareproject776 at gmail.com
Fri May 13 03:54:46 UTC 2022
Read the setpriv post from before, is adding that not more benifical.
Just quick tested util-linux version.
It allows privdropping
udhcpd - net_raw
udhcpc - net_raw,net_admin
udhcpc6 - net_raw,net_admin
ntpd - sys_time
telnetd - setuid,setgid
ftpd - setuid,setgid,(sys_chroot someone posted the homedir patch the other day)
crond - setuid,setgid
even managed to get dropbear out of it
nothing to do with actually coding but that just gifted me
an easy way to harden my current busybox setup
so many thanks who ever posted that :)
off down a seccomp cli wrapper rabbit hole now
--
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://lists.busybox.net/pipermail/busybox/attachments/20220513/bcde710b/attachment.asc>
More information about the busybox
mailing list