busybox/miscutils
Ryan Mallon 1d30b3f1f6 wall,crontab: use xopen_as_uid_gid()
This fixes a narrow security race in crontab.

function                                             old     new   delta
xopen_as_uid_gid                                       -      80     +80
seteuid                                                -      64     +64
setegid                                                -      64     +64
setreuid                                               -      37     +37
xseteuid                                               -      22     +22
xsetegid                                               -      22     +22
crontab_main                                         590     577     -13
setfsuid                                              33       -     -33
setfsgid                                              33       -     -33
wall_main                                            138     102     -36
open_as_user                                         109       -    -109

   text    data     bss     dec     hex filename
 893539     497    7568  901604   dc1e4 busybox_old
 893618     497    7568  901683   dc233 busybox_unstripped

Signed-off-by: Ryan Mallon <rmallon@gmail.com>
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
2013-10-08 14:53:29 +02:00
..
adjtimex.c
bbconfig.c
beep.c
chat.c
chrt.c chrt: remove warning for _POSIX_PRIORITY_SCHEDULING 2013-07-08 11:20:13 +02:00
Config.src wall: access FILE under real user's credentials 2013-10-06 15:14:25 +02:00
conspy.c
crond.c CONFIG_PID_FILE_PATH: new configuration option for pidfile paths 2012-12-19 15:53:33 -05:00
crontab.c wall,crontab: use xopen_as_uid_gid() 2013-10-08 14:53:29 +02:00
dc.c dc: code shrink 2013-01-18 13:30:13 +01:00
devfsd.c whitespace fixes. no code changes 2013-01-15 13:58:01 +01:00
devmem.c
eject.c
fbsplash.c whitespace fixes. no code changes 2013-01-14 01:34:48 +01:00
fbsplash.cfg
flash_eraseall.c flash_eraseall: implement -N 2013-03-15 00:42:39 +01:00
flash_lock_unlock.c
flashcp.c flashcp: trivial code shrink 2013-01-28 12:26:29 +01:00
hdparm.c whitespace fixes. no code changes 2013-01-15 13:58:01 +01:00
inotifyd.c
ionice.c
Kbuild.src wall: access FILE under real user's credentials 2013-10-06 15:14:25 +02:00
last_fancy.c whitespace cleanup. no code changes 2013-01-14 15:57:44 +01:00
last.c whitespace fixes. no code changes 2013-01-14 01:34:48 +01:00
less.c less: support "less 1<>TTY" 2013-08-04 17:41:19 +02:00
makedevs.c
man.c man: find posix man pages 2013-08-25 17:38:25 -04:00
microcom.c
mountpoint.c
mt.c
nandwrite.c nanddump: fix build if nandwrite isn't enabled 2013-03-15 00:27:41 +01:00
raidautorun.c
readahead.c
rfkill.c
runlevel.c
rx.c whitespace fixes. no code changes 2013-01-15 13:58:01 +01:00
setserial.c setserial: Fix typo: s/baund_rate/baud_rate/g 2013-03-22 17:04:51 +01:00
setsid.c setsid: code shrink, expanded comments 2013-08-07 18:49:51 +02:00
strings.c
taskset.c
time.c whitespace fixes. no code changes 2013-01-15 13:58:01 +01:00
timeout.c
ttysize.c
ubi_tools.c ubi_tools: fix typo in strcpy 2013-08-04 21:07:20 +02:00
volname.c
wall.c wall,crontab: use xopen_as_uid_gid() 2013-10-08 14:53:29 +02:00
watchdog.c CONFIG_PID_FILE_PATH: new configuration option for pidfile paths 2012-12-19 15:53:33 -05:00