diff options
author | Denys Vlasenko <vda.linux@googlemail.com> | 2017-08-05 01:29:12 +0200 |
---|---|---|
committer | Denys Vlasenko <vda.linux@googlemail.com> | 2017-08-05 01:29:12 +0200 |
commit | 9f59849daab488b5a46926a2979e8b957021e844 (patch) | |
tree | 874c7feabc9c931ee2c2be0dddc02414562a0c58 /NOFORK_NOEXEC.lst | |
parent | b182e9ad6011909fdb76358431d23d195febaf54 (diff) | |
download | busybox-w32-9f59849daab488b5a46926a2979e8b957021e844.tar.gz busybox-w32-9f59849daab488b5a46926a2979e8b957021e844.tar.bz2 busybox-w32-9f59849daab488b5a46926a2979e8b957021e844.zip |
blockdev, fsfreeze, fstrim, mountpoint: make NOEXEC
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
Diffstat (limited to 'NOFORK_NOEXEC.lst')
-rw-r--r-- | NOFORK_NOEXEC.lst | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst index ad49cd809..b2f410177 100644 --- a/NOFORK_NOEXEC.lst +++ b/NOFORK_NOEXEC.lst | |||
@@ -51,7 +51,7 @@ basename - NOFORK | |||
51 | beep | 51 | beep |
52 | blkdiscard | 52 | blkdiscard |
53 | blkid | 53 | blkid |
54 | blockdev - noexec candidate (rather simple), leaks fd | 54 | blockdev - noexec. leaks fd |
55 | bootchartd - daemon | 55 | bootchartd - daemon |
56 | brctl | 56 | brctl |
57 | bunzip2 - runner | 57 | bunzip2 - runner |
@@ -134,8 +134,8 @@ free - nofork candidate(struct globals, needs to close /proc/meminfo fd) | |||
134 | freeramdisk - leaks: open+ioctl_or_perror_and_die | 134 | freeramdisk - leaks: open+ioctl_or_perror_and_die |
135 | fsck - interactive, longterm | 135 | fsck - interactive, longterm |
136 | fsck.minix - needs ^C | 136 | fsck.minix - needs ^C |
137 | fsfreeze - noexec candidate (it's very simple), leaks: open+xioctl | 137 | fsfreeze - noexec. leaks: open+xioctl |
138 | fstrim - noexec candidate (it's very simple), leaks: open+xioctl, find_block_device -> readdir+xstrdup | 138 | fstrim - noexec. leaks: open+xioctl, find_block_device -> readdir+xstrdup |
139 | fsync - NOFORK | 139 | fsync - NOFORK |
140 | ftpd - daemon | 140 | ftpd - daemon |
141 | ftpget - runner | 141 | ftpget - runner |
@@ -236,7 +236,7 @@ modinfo - noexec | |||
236 | modprobe - noexec | 236 | modprobe - noexec |
237 | more - interactive, longterm | 237 | more - interactive, longterm |
238 | mount - suid | 238 | mount - suid |
239 | mountpoint - noexec candidate, leaks: option -n "print dev name": find_block_device -> readdir+xstrdup | 239 | mountpoint - noexec. leaks: option -n "print dev name": find_block_device -> readdir+xstrdup |
240 | mpstat - noexec candidate (it's a measuring tool, putting less load by itself is good), complex | 240 | mpstat - noexec candidate (it's a measuring tool, putting less load by itself is good), complex |
241 | mt - rare | 241 | mt - rare |
242 | mv - noexec candidate, runner | 242 | mv - noexec candidate, runner |