From 9a58cc0f7fbdf967c159588e0de5f3a8dfd87db5 Mon Sep 17 00:00:00 2001 From: Denys Vlasenko Date: Sun, 6 Aug 2017 12:28:00 +0200 Subject: [PATCH] tunctl: make it NOEXEC Signed-off-by: Denys Vlasenko --- NOFORK_NOEXEC.lst | 4 ++-- networking/tunctl.c | 2 +- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst index c605302d9..45b178ca8 100644 --- a/NOFORK_NOEXEC.lst +++ b/NOFORK_NOEXEC.lst @@ -182,7 +182,7 @@ ipneigh - noexec candidate iproute - noexec candidate iprule - noexec candidate iptunnel - noexec candidate -kbd_mode - leaks: xopen_nonblocking+xioctl +kbd_mode - noexec. leaks: xopen_nonblocking+xioctl kill - NOFORK killall - NOFORK killall5 - NOFORK @@ -365,7 +365,7 @@ true - NOFORK truncate - NOFORK tty - NOFORK ttysize - NOFORK -tunctl +tunctl - noexec tune2fs - noexec. leaks: open+xfunc ubiattach ubidetach diff --git a/networking/tunctl.c b/networking/tunctl.c index 0a26ff7fb..4c3220025 100644 --- a/networking/tunctl.c +++ b/networking/tunctl.c @@ -24,7 +24,7 @@ //config: Allow to specify owner and group of newly created interface. //config: 340 bytes of pure bloat. Say no here. -//applet:IF_TUNCTL(APPLET(tunctl, BB_DIR_SBIN, BB_SUID_DROP)) +//applet:IF_TUNCTL(APPLET_NOEXEC(tunctl, tunctl, BB_DIR_SBIN, BB_SUID_DROP, tunctl)) //kbuild:lib-$(CONFIG_TUNCTL) += tunctl.o