getopt: make it NOEXEC

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>

2 files changed, 14 insertions, 14 deletions

diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index 7073611a4..9fcef7823 100644
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -129,7 +129,7 @@ ftpd - daemon
 ftpget - runner
 ftpput - runner
 fuser - complex
-getopt
+getopt - noexec. complex (many allocs)
 getty - interactive
 grep - runner
 groups - noexec
@@ -160,16 +160,16 @@ insmod
 install - runner
 ionice - spawner
 iostat - runner
-ip
-ipaddr
-ipcalc
-ipcrm
-ipcs
-iplink
-ipneigh
-iproute
-iprule
-iptunnel
+ip - noexec candidate
+ipaddr - noexec candidate
+ipcalc - noexec candidate
+ipcrm - noexec candidate
+ipcs - noexec candidate
+iplink - noexec candidate
+ipneigh - noexec candidate
+iproute - noexec candidate
+iprule - noexec candidate
+iptunnel - noexec candidate
 kbd_mode
 kill - NOFORK
 killall - NOFORK
@@ -257,8 +257,8 @@ poweroff - rare
 powertop - interactive, longterm
 printenv - NOFORK
 printf - NOFORK
-ps
-pscan
+ps - noexec candidate
+pscan - longterm
 pstree
 pwd - NOFORK
 pwdx - NOFORK
diff --git a/util-linux/getopt.c b/util-linux/getopt.c
index cf1bc592f..5fe0da7cd 100644
--- a/util-linux/getopt.c
+++ b/util-linux/getopt.c
@@ -47,7 +47,7 @@
 //config:       help
 //config:       Enable support for long options (option -l).
 
-//applet:IF_GETOPT(APPLET(getopt, BB_DIR_BIN, BB_SUID_DROP))
+//applet:IF_GETOPT(APPLET_NOEXEC(getopt, getopt, BB_DIR_BIN, BB_SUID_DROP, getopt))
 
 //kbuild:lib-$(CONFIG_GETOPT) += getopt.o