emo/busybox
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

blockdev, fsfreeze, fstrim, mountpoint: make NOEXEC

Browse Source 
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
This commit is contained in:
Denys Vlasenko 2017-08-05 01:29:12 +02:00
parent b182e9ad60
commit 9f59849daa
5 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
NOFORK_NOEXEC.lst
View File

@ -51,7 +51,7 @@ basename - NOFORK
beep
blkdiscard
blkid
blockdev - noexec candidate (rather simple), leaks fd
blockdev - noexec. leaks fd
bootchartd - daemon
brctl
bunzip2 - runner
@ -134,8 +134,8 @@ free - nofork candidate(struct globals, needs to close /proc/meminfo fd)
freeramdisk - leaks: open+ioctl_or_perror_and_die
fsck - interactive, longterm
fsck.minix - needs ^C
fsfreeze - noexec candidate (it's very simple), leaks: open+xioctl
fstrim - noexec candidate (it's very simple), leaks: open+xioctl, find_block_device -> readdir+xstrdup
fsfreeze - noexec. leaks: open+xioctl
fstrim - noexec. leaks: open+xioctl, find_block_device -> readdir+xstrdup
fsync - NOFORK
ftpd - daemon
ftpget - runner
@ -236,7 +236,7 @@ modinfo - noexec
modprobe - noexec
more - interactive, longterm
mount - suid
mountpoint - noexec candidate, leaks: option -n "print dev name": find_block_device -> readdir+xstrdup
mountpoint - noexec. leaks: option -n "print dev name": find_block_device -> readdir+xstrdup
mpstat - noexec candidate (it's a measuring tool, putting less load by itself is good), complex
mt - rare
mv - noexec candidate, runner

2
util-linux/blockdev.c
View File

@ -11,7 +11,7 @@
//config: help
//config: Performs some ioctls with block devices.
//applet:IF_BLOCKDEV(APPLET(blockdev, BB_DIR_SBIN, BB_SUID_DROP))
//applet:IF_BLOCKDEV(APPLET_NOEXEC(blockdev, blockdev, BB_DIR_SBIN, BB_SUID_DROP, blockdev))
//kbuild:lib-$(CONFIG_BLOCKDEV) += blockdev.o

2
util-linux/fsfreeze.c
View File

@ -13,7 +13,7 @@
//config: help
//config: Halt new accesses and flush writes on a mounted filesystem.
//applet:IF_FSFREEZE(APPLET(fsfreeze, BB_DIR_USR_SBIN, BB_SUID_DROP))
//applet:IF_FSFREEZE(APPLET_NOEXEC(fsfreeze, fsfreeze, BB_DIR_USR_SBIN, BB_SUID_DROP, fsfreeze))
//kbuild:lib-$(CONFIG_FSFREEZE) += fsfreeze.o

2
util-linux/fstrim.c
View File

@ -15,7 +15,7 @@
//config: help
//config: Discard unused blocks on a mounted filesystem.
//applet:IF_FSTRIM(APPLET(fstrim, BB_DIR_SBIN, BB_SUID_DROP))
//applet:IF_FSTRIM(APPLET_NOEXEC(fstrim, fstrim, BB_DIR_SBIN, BB_SUID_DROP, fstrim))
//kbuild:lib-$(CONFIG_FSTRIM) += fstrim.o

2
util-linux/mountpoint.c
View File

@ -14,7 +14,7 @@
//config: help
//config: mountpoint checks if the directory is a mountpoint.
//applet:IF_MOUNTPOINT(APPLET(mountpoint, BB_DIR_BIN, BB_SUID_DROP))
//applet:IF_MOUNTPOINT(APPLET_NOEXEC(mountpoint, mountpoint, BB_DIR_BIN, BB_SUID_DROP, mountpoint))
//kbuild:lib-$(CONFIG_MOUNTPOINT) += mountpoint.o