aboutsummaryrefslogtreecommitdiff
path: root/NOFORK_NOEXEC.lst
diff options
context:
space:
mode:
authorDenys Vlasenko <vda.linux@googlemail.com>2017-08-05 02:02:31 +0200
committerDenys Vlasenko <vda.linux@googlemail.com>2017-08-05 02:02:31 +0200
commitff53bee72300ba97c645404a64c7091991ffa110 (patch)
tree9d02bf1799875859ab4d4ad3928f08fdbb7162d4 /NOFORK_NOEXEC.lst
parentfdb92359e47eee8ccd57092928cedccb28ce2f11 (diff)
downloadbusybox-w32-ff53bee72300ba97c645404a64c7091991ffa110.tar.gz
busybox-w32-ff53bee72300ba97c645404a64c7091991ffa110.tar.bz2
busybox-w32-ff53bee72300ba97c645404a64c7091991ffa110.zip
chvt, deallocvt, dumpkmap, fgconsole, loadkmap: make them NOEXEC
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
Diffstat (limited to 'NOFORK_NOEXEC.lst')
-rw-r--r--NOFORK_NOEXEC.lst10
1 files changed, 5 insertions, 5 deletions
diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index 2fc280596..1d23ad962 100644
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -69,7 +69,7 @@ chpasswd - runner (list of "user:password"s from stdin)
69chpst - noexec. spawner 69chpst - noexec. spawner
70chroot - noexec. spawner 70chroot - noexec. spawner
71chrt - noexec. spawner 71chrt - noexec. spawner
72chvt - leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds. Also, "rare" category. noexec candidate. 72chvt - noexec. leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds
73cksum - noexec. runner 73cksum - noexec. runner
74clear - NOFORK 74clear - NOFORK
75cmp - runner 75cmp - runner
@@ -85,7 +85,7 @@ cut - noexec. runner
85date - noexec. nofork candidate(needs to stop messing up env, free xasprintf result, not use xfuncs after xasprintf) 85date - noexec. nofork candidate(needs to stop messing up env, free xasprintf result, not use xfuncs after xasprintf)
86dc - runner (eats stdin if no params) 86dc - runner (eats stdin if no params)
87dd - noexec. runner 87dd - noexec. runner
88deallocvt - leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds. Also, "rare" category. noexec candidate. 88deallocvt - noexec. leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds
89delgroup 89delgroup
90deluser 90deluser
91depmod - complex, rare 91depmod - complex, rare
@@ -100,7 +100,7 @@ dnsdomainname - needs ^C (may talk to DNS servers, which may be down)
100dos2unix - noexec. runner 100dos2unix - noexec. runner
101dpkg - runner 101dpkg - runner
102du - runner 102du - runner
103dumpkmap - leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds. Also, "rare" category. noexec candidate. 103dumpkmap - noexec. leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds
104dumpleases - leaks: open+xread 104dumpleases - leaks: open+xread
105echo - NOFORK 105echo - NOFORK
106ed - interactive, longterm 106ed - interactive, longterm
@@ -120,7 +120,7 @@ fbsplash - runner, longterm
120fdflush - leaks: open+ioctl_or_perror_and_die, needs ^C (floppy may be unresponsive), rare 120fdflush - leaks: open+ioctl_or_perror_and_die, needs ^C (floppy may be unresponsive), rare
121fdformat - needs ^C (floppy may be unresponsive), longterm, rare 121fdformat - needs ^C (floppy may be unresponsive), longterm, rare
122fdisk - interactive, longterm 122fdisk - interactive, longterm
123fgconsole - leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds. Also, "rare" category. noexec candidate. 123fgconsole - noexec. leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds
124fgrep - longterm runner ("CMD | fgrep ..." may run indefinitely, better to exec to conserve memory) 124fgrep - longterm runner ("CMD | fgrep ..." may run indefinitely, better to exec to conserve memory)
125find - noexec. runner 125find - noexec. runner
126findfs - suid 126findfs - suid
@@ -195,7 +195,7 @@ linux64 - noexec. spawner
195linuxrc - daemon 195linuxrc - daemon
196ln - noexec 196ln - noexec
197loadfont - leaks: config_open+bb_error_msg_and_die("map format") 197loadfont - leaks: config_open+bb_error_msg_and_die("map format")
198loadkmap - leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds. Also, "rare" category. noexec candidate. 198loadkmap - noexec. leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds
199logger - runner 199logger - runner
200login - suid, interactive, longterm 200login - suid, interactive, longterm
201logname - NOFORK 201logname - NOFORK