diff options
Diffstat (limited to 'sysdeps')
-rw-r--r-- | sysdeps/linux/Config.in | 59 |
1 files changed, 35 insertions, 24 deletions
diff --git a/sysdeps/linux/Config.in b/sysdeps/linux/Config.in index 4d72cd688..d5adee5d0 100644 --- a/sysdeps/linux/Config.in +++ b/sysdeps/linux/Config.in | |||
@@ -90,21 +90,39 @@ config CONFIG_FEATURE_SUID | |||
90 | bool "Support for SUID/SGID handling" | 90 | bool "Support for SUID/SGID handling" |
91 | default n | 91 | default n |
92 | help | 92 | help |
93 | Please submit a patch to add help text for this item. | 93 | Support SUID and SGID binaries. |
94 | 94 | ||
95 | config CONFIG_FEATURE_SUID_CONFIG | 95 | config CONFIG_FEATURE_SUID_CONFIG |
96 | bool "Runtime SUID/SGID configuration via /etc/busybox.conf" | 96 | bool "Runtime SUID/SGID configuration via /etc/busybox.conf" |
97 | default y if CONFIG_FEATURE_SUID | 97 | default y if CONFIG_FEATURE_SUID |
98 | depends on CONFIG_FEATURE_SUID | 98 | depends on CONFIG_FEATURE_SUID |
99 | help | 99 | help |
100 | Please submit a patch to add help text for this item. | 100 | Allow the SUID / SGID state of an applet to be determinded runtime by |
101 | checking /etc/busybox.conf. The format of this file is as follows: | ||
102 | |||
103 | <applet> = [Ssx-][Ssx-][x-] (<username>|<uid>).(<groupname>|<gid>) | ||
104 | |||
105 | An example might help: | ||
106 | |||
107 | [SUID] | ||
108 | su = ssx root.0 # applet su can be run by anyone and runs with euid=0/egid=0 | ||
109 | su = ssx # exactly the same | ||
110 | |||
111 | mount = sx- root.disk # applet mount can be run by root and members of group disk | ||
112 | # and runs with euid=0 | ||
113 | |||
114 | cp = --- # disable applet cp for everyone | ||
115 | |||
116 | Robert 'sandman' Griebl has more information here: | ||
117 | <url: http://www.softforge.de/bb/suid.html >. | ||
101 | 118 | ||
102 | config CONFIG_FEATURE_SUID_CONFIG_QUIET | 119 | config CONFIG_FEATURE_SUID_CONFIG_QUIET |
103 | bool "Suppress warning message if /etc/busybox.conf is not readable" | 120 | bool "Suppress warning message if /etc/busybox.conf is not readable" |
104 | default n | 121 | default n |
105 | depends on CONFIG_FEATURE_SUID_CONFIG | 122 | depends on CONFIG_FEATURE_SUID_CONFIG |
106 | help | 123 | help |
107 | Please submit a patch to add help text for this item. | 124 | /etc/busybox.conf should be readable by the user needing the SUID, check |
125 | this option to avoid users to be notified about missing permissions. | ||
108 | 126 | ||
109 | config CONFIG_SELINUX | 127 | config CONFIG_SELINUX |
110 | bool "Support NSA Security Enhanced Linux" | 128 | bool "Support NSA Security Enhanced Linux" |
@@ -117,14 +135,21 @@ endmenu | |||
117 | 135 | ||
118 | menu 'Build Options' | 136 | menu 'Build Options' |
119 | 137 | ||
120 | config DOSTATIC | 138 | config CONFIG_STATIC |
121 | bool "Build BusyBox as a static binary (no shared libs)" | 139 | bool "Build BusyBox as a static binary (no shared libs)" |
122 | default n | 140 | default n |
123 | help | 141 | help |
124 | If you want to build a static BusyBox binary, which does not | 142 | If you want to build a static BusyBox binary, which does not |
125 | use or require any shared libraries, then enable this option. | 143 | use or require any shared libraries, then enable this option. |
144 | This can make BusyBox be considerably larger, so you should | ||
145 | leave this option false unless you have a good reason (i.e. | ||
146 | your target platform does not support shared libraries, or | ||
147 | you are building an initrd which doesn't need anything but | ||
148 | BusyBox, etc). | ||
126 | 149 | ||
127 | config DOLFS | 150 | Most people will leave this set to 'N'. |
151 | |||
152 | config CONFIG_LFS | ||
128 | bool "Build with Large File Support (for accessing files > 2 GB)" | 153 | bool "Build with Large File Support (for accessing files > 2 GB)" |
129 | default n | 154 | default n |
130 | help | 155 | help |
@@ -201,21 +226,7 @@ source util-linux/Config.in | |||
201 | 226 | ||
202 | menu 'Debugging Options' | 227 | menu 'Debugging Options' |
203 | 228 | ||
204 | config DOSTATIC | 229 | config CONFIG_DEBUG |
205 | bool "Build BusyBox as a static binary (no shared libs)" | ||
206 | default n | ||
207 | help | ||
208 | If you want to build a static BusyBox binary, which does not | ||
209 | use or require any shared libraries, then enable this option. | ||
210 | This will make BusyBox be considerable larger, so you should | ||
211 | leave this option false unless you have a good reason (i.e. | ||
212 | your target platform does not support shared libraries, or | ||
213 | you are building an initrd which doesn't need anything but | ||
214 | BusyBox, etc). | ||
215 | |||
216 | Most people will leave this set to 'N'. | ||
217 | |||
218 | config DODEBUG | ||
219 | bool "Build BusyBox with Debugging symbols" | 230 | bool "Build BusyBox with Debugging symbols" |
220 | default n | 231 | default n |
221 | help | 232 | help |
@@ -227,10 +238,10 @@ config DODEBUG | |||
227 | 238 | ||
228 | Otherwise, answer N. | 239 | Otherwise, answer N. |
229 | 240 | ||
230 | config DODMALLOC | 241 | config CONFIG_DMALLOC |
231 | bool "Build BusyBox with dmalloc support" | 242 | bool "Build BusyBox with dmalloc support" |
232 | default n | 243 | default n |
233 | depends on DODEBUG && !DOEFENCE | 244 | depends on CONFIG_DEBUG && !CONFIG_EFENCE |
234 | help | 245 | help |
235 | This enables compiling with dmalloc ( http://dmalloc.com/ ) | 246 | This enables compiling with dmalloc ( http://dmalloc.com/ ) |
236 | which is an excellent public domain mem leak and malloc problem | 247 | which is an excellent public domain mem leak and malloc problem |
@@ -245,10 +256,10 @@ config DODMALLOC | |||
245 | This will make BusyBox be considerable larger and run slower, so | 256 | This will make BusyBox be considerable larger and run slower, so |
246 | you should leave this option disabled for production use. | 257 | you should leave this option disabled for production use. |
247 | 258 | ||
248 | config DOEFENCE | 259 | config CONFIG_EFENCE |
249 | bool "Build BusyBox with Electric-fence support" | 260 | bool "Build BusyBox with Electric-fence support" |
250 | default n | 261 | default n |
251 | depends on DODEBUG && !DODMALLOC | 262 | depends on CONFIG_DEBUG && !CONFIG_DMALLOC |
252 | help | 263 | help |
253 | This enables compiling with Electric-fence support. Electric | 264 | This enables compiling with Electric-fence support. Electric |
254 | fence is another very useful malloc debugging library which used | 265 | fence is another very useful malloc debugging library which used |