aboutsummaryrefslogtreecommitdiff
path: root/NOFORK_NOEXEC.lst
diff options
context:
space:
mode:
authorDenys Vlasenko <vda.linux@googlemail.com>2017-08-04 17:59:46 +0200
committerDenys Vlasenko <vda.linux@googlemail.com>2017-08-04 17:59:46 +0200
commit83d7785e413bbfc4c639c855a6e47f64bdc5da9a (patch)
treebe2cb6035dbf4f1c316893d41560587cd2a8d85e /NOFORK_NOEXEC.lst
parent6bec24c4f5a2c853c10fd59a56d0d197b5e5fd64 (diff)
downloadbusybox-w32-83d7785e413bbfc4c639c855a6e47f64bdc5da9a.tar.gz
busybox-w32-83d7785e413bbfc4c639c855a6e47f64bdc5da9a.tar.bz2
busybox-w32-83d7785e413bbfc4c639c855a6e47f64bdc5da9a.zip
runlevel: make it NOEXEC
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
Diffstat (limited to 'NOFORK_NOEXEC.lst')
-rw-r--r--NOFORK_NOEXEC.lst38
1 files changed, 19 insertions, 19 deletions
diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index 90c802b2a..d6959e363 100644
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -66,21 +66,21 @@ chgrp - noexec. runner
66chmod - noexec. runner 66chmod - noexec. runner
67chown - noexec. runner 67chown - noexec. runner
68chpasswd - runner (list of "user:password"s from stdin) 68chpasswd - runner (list of "user:password"s from stdin)
69chpst - spawner 69chpst - noexec candidate, spawner
70chroot - spawner 70chroot - noexec candidate, spawner
71chrt - spawner 71chrt - noexec candidate, spawner
72chvt - leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds. Also, "rare" category. Can be noexec. 72chvt - leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds. Also, "rare" category. Can be noexec.
73cksum - noexec. runner 73cksum - noexec. runner
74clear - NOFORK 74clear - NOFORK
75cmp - runner 75cmp - runner
76comm - runner 76comm - runner
77conspy - interactive 77conspy - interactive, longterm
78cp - noexec. runner 78cp - noexec. runner
79cpio - runner 79cpio - runner
80crond - daemon 80crond - daemon
81crontab 81crontab
82cryptpw - changes state: with --password-fd=N, moves N to stdin. Also, "rare" category. Can be noexec. 82cryptpw - changes state: with --password-fd=N, moves N to stdin. Also, "rare" category. Can be noexec.
83cttyhack - spawner 83cttyhack - noexec candidate, spawner
84cut - noexec. runner 84cut - noexec. runner
85date - noexec. nofork candidate(needs to stop messing up env, free xasprintf result, not use xfuncs after xasprintf) 85date - noexec. nofork candidate(needs to stop messing up env, free xasprintf result, not use xfuncs after xasprintf)
86dc - runner (eats stdin if no params) 86dc - runner (eats stdin if no params)
@@ -90,7 +90,7 @@ delgroup
90deluser 90deluser
91depmod - complex, rare 91depmod - complex, rare
92devmem - runner, complex (access to device memory may hang) 92devmem - runner, complex (access to device memory may hang)
93df - complex (nested allocs) 93df - leaks: nested allocs
94dhcprelay - daemon 94dhcprelay - daemon
95diff - runner 95diff - runner
96dirname - NOFORK 96dirname - NOFORK
@@ -106,15 +106,15 @@ echo - NOFORK
106ed - interactive, longterm 106ed - interactive, longterm
107egrep - longterm runner ("CMD | egrep ..." may run indefinitely, better to exec to conserve memory) 107egrep - longterm runner ("CMD | egrep ..." may run indefinitely, better to exec to conserve memory)
108eject - leaks: open+ioctl_or_perror_and_die, changes state (moves fds) 108eject - leaks: open+ioctl_or_perror_and_die, changes state (moves fds)
109env - noexec. changes state (env) 109env - noexec. spawner, changes state (env)
110envdir - spawner 110envdir - noexec candidate, spawner
111envuidgid - spawner 111envuidgid - noexec candidate, spawner
112expand - runner 112expand - runner
113expr - complex (nested allocs) 113expr - leaks: nested allocs
114factor - runner (eats stdin if no params) 114factor - runner (eats stdin if no params)
115fakeidentd - daemon 115fakeidentd - daemon
116false - NOFORK 116false - NOFORK
117fatattr - complex (xopen+xioctl can leak fd) 117fatattr - leaks: open+xioctl, complex
118fbset - leaks: open+xfunc, complex, rare 118fbset - leaks: open+xfunc, complex, rare
119fbsplash - runner, longterm 119fbsplash - runner, longterm
120fdflush - leaks: open+ioctl_or_perror_and_die, needs ^C (floppy may be unresponsive), rare 120fdflush - leaks: open+ioctl_or_perror_and_die, needs ^C (floppy may be unresponsive), rare
@@ -134,14 +134,14 @@ free - nofork candidate(struct globals, needs to close /proc/meminfo fd)
134freeramdisk - leaks: open+ioctl_or_perror_and_die 134freeramdisk - leaks: open+ioctl_or_perror_and_die
135fsck - interactive, longterm 135fsck - interactive, longterm
136fsck.minix 136fsck.minix
137fsfreeze 137fsfreeze - noexec candidate (it's very simple), leaks: open+xioctl
138fstrim 138fstrim - noexec candidate (it's very simple), leaks: open+xioctl
139fsync - NOFORK 139fsync - NOFORK
140ftpd - daemon 140ftpd - daemon
141ftpget - runner 141ftpget - runner
142ftpput - runner 142ftpput - runner
143fuser - complex 143fuser - complex
144getopt - noexec. complex (many allocs) 144getopt - noexec. leaks: many allocs
145getty - interactive, longterm 145getty - interactive, longterm
146grep - longterm runner ("CMD | grep ..." may run indefinitely, better to exec to conserve memory) 146grep - longterm runner ("CMD | grep ..." may run indefinitely, better to exec to conserve memory)
147groups - noexec 147groups - noexec
@@ -156,7 +156,7 @@ hostid - NOFORK
156hostname - DNS resolution may trigger, need ^C 156hostname - DNS resolution may trigger, need ^C
157httpd - daemon 157httpd - daemon
158hush - interactive, longterm 158hush - interactive, longterm
159hwclock 159hwclock - talks to hardware (xioctl(RTC_RD_TIME)) - needs ^C
160i2cdetect 160i2cdetect
161i2cdump 161i2cdump
162i2cget 162i2cget
@@ -293,9 +293,9 @@ rmmod - noexec
293route 293route
294rpm - runner 294rpm - runner
295rpm2cpio - runner 295rpm2cpio - runner
296rtcwake - complex, rare 296rtcwake - puts system to sleep, optimizing this for speed is pointless
297run-parts 297run-parts
298runlevel 298runlevel - noexec. can be nofork if "endutxent()" is called unconditionally, but too rare to bother?
299runsv - daemon 299runsv - daemon
300runsvdir - daemon 300runsvdir - daemon
301rx - runner 301rx - runner
@@ -400,10 +400,10 @@ vlock - suid
400volname - runner 400volname - runner
401w 401w
402wall - suid 402wall - suid
403watch - runner 403watch - longterm
404watchdog - daemon 404watchdog - daemon
405wc - runner 405wc - runner
406wget - runner 406wget - longterm
407which - NOFORK 407which - NOFORK
408who 408who
409whoami - NOFORK 409whoami - NOFORK
generated by cgit v1.2.3-55-g6feb (git 2.39.1) at 2025-03-17 20:31:59 +0000