diff options
author | Denys Vlasenko <vda.linux@googlemail.com> | 2017-08-09 18:52:19 +0200 |
---|---|---|
committer | Denys Vlasenko <vda.linux@googlemail.com> | 2017-08-09 18:52:19 +0200 |
commit | a4d4ab04c3706af1cb2f65fb00c96d3ccba1020c (patch) | |
tree | 58cea649f7d923f07494b8598666126610f15c22 | |
parent | 9be166b5dd5161ea537d662660cc0142aa2db92b (diff) | |
download | busybox-w32-a4d4ab04c3706af1cb2f65fb00c96d3ccba1020c.tar.gz busybox-w32-a4d4ab04c3706af1cb2f65fb00c96d3ccba1020c.tar.bz2 busybox-w32-a4d4ab04c3706af1cb2f65fb00c96d3ccba1020c.zip |
vconfig: make it NOEXEC
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
-rw-r--r-- | NOFORK_NOEXEC.lst | 2 | ||||
-rw-r--r-- | networking/vconfig.c | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst index bfb76a12e..063d7cd48 100644 --- a/NOFORK_NOEXEC.lst +++ b/NOFORK_NOEXEC.lst | |||
@@ -400,7 +400,7 @@ users - noexec. nofork candidate(is getutxent ok?) | |||
400 | usleep - NOFORK | 400 | usleep - NOFORK |
401 | uudecode - runner | 401 | uudecode - runner |
402 | uuencode - runner | 402 | uuencode - runner |
403 | vconfig - leaks: xsocket+ioctl_or_perror_and_die | 403 | vconfig - noexec. leaks: xsocket+ioctl_or_perror_and_die |
404 | vi - interactive, longterm | 404 | vi - interactive, longterm |
405 | vlock - suid | 405 | vlock - suid |
406 | volname - hardware (reads CDROM, this can take long-ish if need to spin up) | 406 | volname - hardware (reads CDROM, this can take long-ish if need to spin up) |
diff --git a/networking/vconfig.c b/networking/vconfig.c index e6e2872bf..62a483865 100644 --- a/networking/vconfig.c +++ b/networking/vconfig.c | |||
@@ -16,7 +16,7 @@ | |||
16 | //config: help | 16 | //config: help |
17 | //config: Creates, removes, and configures VLAN interfaces | 17 | //config: Creates, removes, and configures VLAN interfaces |
18 | 18 | ||
19 | //applet:IF_VCONFIG(APPLET(vconfig, BB_DIR_SBIN, BB_SUID_DROP)) | 19 | //applet:IF_VCONFIG(APPLET_NOEXEC(vconfig, vconfig, BB_DIR_SBIN, BB_SUID_DROP, vconfig)) |
20 | 20 | ||
21 | //kbuild:lib-$(CONFIG_VCONFIG) += vconfig.o | 21 | //kbuild:lib-$(CONFIG_VCONFIG) += vconfig.o |
22 | 22 | ||