emo/busybox
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

tunctl: make it NOEXEC

Browse Source 
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
This commit is contained in:
Denys Vlasenko 2017-08-06 12:28:00 +02:00
parent ae17ba0924
commit 9a58cc0f7f
2 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
NOFORK_NOEXEC.lst
View File

@ -182,7 +182,7 @@ ipneigh - noexec candidate
iproute - noexec candidate
iprule - noexec candidate
iptunnel - noexec candidate
kbd_mode - leaks: xopen_nonblocking+xioctl
kbd_mode - noexec. leaks: xopen_nonblocking+xioctl
kill - NOFORK
killall - NOFORK
killall5 - NOFORK
@ -365,7 +365,7 @@ true - NOFORK
truncate - NOFORK
tty - NOFORK
ttysize - NOFORK
tunctl
tunctl - noexec
tune2fs - noexec. leaks: open+xfunc
ubiattach
ubidetach

2
networking/tunctl.c
View File

@ -24,7 +24,7 @@
//config: Allow to specify owner and group of newly created interface.
//config: 340 bytes of pure bloat. Say no here.
//applet:IF_TUNCTL(APPLET(tunctl, BB_DIR_SBIN, BB_SUID_DROP))
//applet:IF_TUNCTL(APPLET_NOEXEC(tunctl, tunctl, BB_DIR_SBIN, BB_SUID_DROP, tunctl))
//kbuild:lib-$(CONFIG_TUNCTL) += tunctl.o