A mirror of https://github.com/rmyorston/busybox-w32.git https://git.lua4.win/busybox-w32/atom?h=FRP 2015-05-18T08:36:27+00:00 2015-05-18T08:36:27+00:00 Ron Yorston rmy@pobox.com 2015-05-18T08:36:27+00:00 urn:sha1:60063627a6d540871061854a362047e6517f821c 2015-05-12T21:59:57+00:00 Daniel Thompson daniel.thompson@linaro.org 2015-05-12T06:56:04+00:00 urn:sha1:a818777d4249e934ef7c9e6e7df8475d6692f315 Linux recently gained a new config option, CONFIG_MULTIUSER, that makes support for non-root users optional. This results in a number of syscalls being disabled: setuid, setregid, setgid, setreuid, setresuid, getresuid, setresgid, getresgid, setgroups, getgroups, setfsuid, setfsgid, capget, capset. Currently a number of busybox applets, including login, struggle to run when CONFIG_MULTIUSER is disabled. Even the root user is unable to login: login: can't set groups: Functi This patch adds code to make change_identity() a nop on single user systems. It works by recognising the signature errno value (ENOSYS, due to the system calls being disabled) and, to avoid security risks, only deploys when the current uid and target uid is the same. After the patch is applied any attempt to switch to a non-root user will fail. Thus a badly configured userspace (for example, one that tries to start a daemon as a non-root user when the kernel cannot support this) will report errors as one would expect. Signed-off-by: Daniel Thompson <daniel.thompson@linaro.org> Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 2015-04-26T11:14:50+00:00 Matt Whitlock busybox@mattwhitlock.name 2015-04-26T11:14:50+00:00 urn:sha1:93b98ff5726fd620e1f123d04072b956412c1b55 Signed-off-by: Matt Whitlock <busybox@mattwhitlock.name> Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 2015-04-25T19:32:48+00:00 Matt Whitlock busybox@mattwhitlock.name 2015-04-25T19:32:48+00:00 urn:sha1:cee59053dcf47b4a3ab87f7654c1ed20620def16 Signed-off-by: Matt Whitlock <busybox@mattwhitlock.name> Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 2015-04-22T20:34:25+00:00 Ron Yorston rmy@pobox.com 2015-04-22T20:34:25+00:00 urn:sha1:db9888142ac02f4aba3f72d29f42d5e982cbf41e 2015-04-21T14:00:41+00:00 Denys Vlasenko vda.linux@googlemail.com 2015-04-21T14:00:41+00:00 urn:sha1:de5edadee2dca2896492f97ab3a56e389305e74d This also removes their help texts. function old new delta run_applet_no_and_exit 442 452 +10 packed_usage 30713 30625 -88 Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 2015-04-20T11:41:32+00:00 Ron Yorston rmy@tigress.co.uk 2015-04-19T09:50:25+00:00 urn:sha1:61d6ae244af424b2a05468307723f21c8810ab9e The loop_on_EINTR argument to nonblock_immune_read is always set to 1. function old new delta xmalloc_reads 200 195 -5 pgetc 488 483 -5 argstr 1313 1308 -5 nonblock_immune_read 123 86 -37 ------------------------------------------------------------------------------ (add/remove: 0/0 grow/shrink: 0/4 up/down: 0/-52) Total: -52 bytes Signed-off-by: Ron Yorston <rmy@tigress.co.uk> Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com> 2015-04-02T21:03:56+00:00 Aaro Koskinen aaro.koskinen@iki.fi 2015-04-01T21:55:17+00:00 urn:sha1:7b729edd33aea5361e0740df800a1a0a1ff70f7f Copyright years seem to be out of date, e.g. coreutils/truncate.c has Copyright (C) 2015. Signed-off-by: Aaro Koskinen <aaro.koskinen@iki.fi> Signed-off-by: Bernhard Reutner-Fischer <rep.dot.nop@gmail.com> 2015-04-02T21:03:46+00:00 Bernhard Reutner-Fischer rep.dot.nop@gmail.com 2015-04-02T21:03:46+00:00 urn:sha1:86a7f18f211af1abda5c855d2674b0fcb53de524 UTMP is SVID legacy, UTMPX is mandated by POSIX. Glibc and uClibc have identical layout of UTMP and UTMPX, both of these libc treat _PATH_UTMPX as _PATH_UTMP so from a user-perspective nothing changes except the names of the API entrypoints. Signed-off-by: Bernhard Reutner-Fischer <rep.dot.nop@gmail.com> 2015-03-23T13:56:37+00:00 Ron Yorston rmy@pobox.com 2015-03-23T13:56:37+00:00 urn:sha1:486a3907f353adeb7f3ced5357db1e604659b785