From 6bec24c4f5a2c853c10fd59a56d0d197b5e5fd64 Mon Sep 17 00:00:00 2001 From: Denys Vlasenko Date: Fri, 4 Aug 2017 17:39:05 +0200 Subject: [PATCH] mktemp: make it NOEXEC Signed-off-by: Denys Vlasenko --- NOFORK_NOEXEC.lst | 2 +- coreutils/mktemp.c | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst index 9741f21ea..90c802b2a 100644 --- a/NOFORK_NOEXEC.lst +++ b/NOFORK_NOEXEC.lst @@ -231,7 +231,7 @@ mkfs.vfat mknod - noexec mkpasswd mkswap -mktemp - leaks: xstrdup+concat_path_file +mktemp - noexec. leaks: xstrdup+concat_path_file modinfo - noexec modprobe - noexec more - interactive, longterm diff --git a/coreutils/mktemp.c b/coreutils/mktemp.c index bfef0b4a6..944eb0e06 100644 --- a/coreutils/mktemp.c +++ b/coreutils/mktemp.c @@ -36,7 +36,7 @@ //config: help //config: mktemp is used to create unique temporary files -//applet:IF_MKTEMP(APPLET(mktemp, BB_DIR_BIN, BB_SUID_DROP)) +//applet:IF_MKTEMP(APPLET_NOEXEC(mktemp, mktemp, BB_DIR_BIN, BB_SUID_DROP, mktemp)) //kbuild:lib-$(CONFIG_MKTEMP) += mktemp.o