diff options
author | Ron Yorston <rmy@pobox.com> | 2023-03-13 10:25:56 +0000 |
---|---|---|
committer | Ron Yorston <rmy@pobox.com> | 2023-03-13 10:25:56 +0000 |
commit | 385decd6bf62c116565ece1e0992ff7a79d48474 (patch) | |
tree | 30065938d54231dcadf54cc3e22206f4985a7180 /configs | |
parent | 6eeb5240974bb304830319e9fa5afbc4d6194fc0 (diff) | |
download | busybox-w32-385decd6bf62c116565ece1e0992ff7a79d48474.tar.gz busybox-w32-385decd6bf62c116565ece1e0992ff7a79d48474.tar.bz2 busybox-w32-385decd6bf62c116565ece1e0992ff7a79d48474.zip |
runuser: new applet
Add a cut down, Windows-specific implementation of `runuser` from
util-linux.
This allows elevated privileges to be dropped when running in an
SSH session. It also works when using `su` or starting busybox-w32
'as administrator'.
There are complications:
- The method used to drop privileges leaves the access token in the
TokenIsElevated state. Detecting this is likely to be fragile.
- The unprivileged shell is started by CreateProcessAsUserA(). In
older versions of Windows this has to be loaded dynamically.
Adds about 900 bytes.
(GitHub issue #240)
Diffstat (limited to 'configs')
-rw-r--r-- | configs/mingw32_defconfig | 3 | ||||
-rw-r--r-- | configs/mingw64_defconfig | 3 |
2 files changed, 4 insertions, 2 deletions
diff --git a/configs/mingw32_defconfig b/configs/mingw32_defconfig index 360ea3b50..611fd327a 100644 --- a/configs/mingw32_defconfig +++ b/configs/mingw32_defconfig | |||
@@ -1,7 +1,7 @@ | |||
1 | # | 1 | # |
2 | # Automatically generated make config: don't edit | 2 | # Automatically generated make config: don't edit |
3 | # Busybox version: 1.37.0.git | 3 | # Busybox version: 1.37.0.git |
4 | # Tue Feb 7 09:34:52 2023 | 4 | # Sun Mar 12 09:41:00 2023 |
5 | # | 5 | # |
6 | CONFIG_HAVE_DOT_CONFIG=y | 6 | CONFIG_HAVE_DOT_CONFIG=y |
7 | # CONFIG_PLATFORM_POSIX is not set | 7 | # CONFIG_PLATFORM_POSIX is not set |
@@ -707,6 +707,7 @@ CONFIG_XXD=y | |||
707 | # CONFIG_RENICE is not set | 707 | # CONFIG_RENICE is not set |
708 | CONFIG_REV=y | 708 | CONFIG_REV=y |
709 | # CONFIG_RTCWAKE is not set | 709 | # CONFIG_RTCWAKE is not set |
710 | CONFIG_RUNUSER=y | ||
710 | # CONFIG_SCRIPT is not set | 711 | # CONFIG_SCRIPT is not set |
711 | # CONFIG_SCRIPTREPLAY is not set | 712 | # CONFIG_SCRIPTREPLAY is not set |
712 | # CONFIG_SETARCH is not set | 713 | # CONFIG_SETARCH is not set |
diff --git a/configs/mingw64_defconfig b/configs/mingw64_defconfig index 0dc1d0d51..6db0accbf 100644 --- a/configs/mingw64_defconfig +++ b/configs/mingw64_defconfig | |||
@@ -1,7 +1,7 @@ | |||
1 | # | 1 | # |
2 | # Automatically generated make config: don't edit | 2 | # Automatically generated make config: don't edit |
3 | # Busybox version: 1.37.0.git | 3 | # Busybox version: 1.37.0.git |
4 | # Tue Feb 7 09:34:52 2023 | 4 | # Sun Mar 12 09:41:00 2023 |
5 | # | 5 | # |
6 | CONFIG_HAVE_DOT_CONFIG=y | 6 | CONFIG_HAVE_DOT_CONFIG=y |
7 | # CONFIG_PLATFORM_POSIX is not set | 7 | # CONFIG_PLATFORM_POSIX is not set |
@@ -707,6 +707,7 @@ CONFIG_XXD=y | |||
707 | # CONFIG_RENICE is not set | 707 | # CONFIG_RENICE is not set |
708 | CONFIG_REV=y | 708 | CONFIG_REV=y |
709 | # CONFIG_RTCWAKE is not set | 709 | # CONFIG_RTCWAKE is not set |
710 | CONFIG_RUNUSER=y | ||
710 | # CONFIG_SCRIPT is not set | 711 | # CONFIG_SCRIPT is not set |
711 | # CONFIG_SCRIPTREPLAY is not set | 712 | # CONFIG_SCRIPTREPLAY is not set |
712 | # CONFIG_SETARCH is not set | 713 | # CONFIG_SETARCH is not set |