aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDenys Vlasenko <vda.linux@googlemail.com>2017-08-06 20:14:02 +0200
committerDenys Vlasenko <vda.linux@googlemail.com>2017-08-06 20:14:02 +0200
commit86e07f6893cfe94a4a7c4aba4b643752808d4235 (patch)
treec927223ecdabd088789772d38fe394a73a465381
parent0f14f41e72d48836a5287d00f05cea236b25be40 (diff)
downloadbusybox-86e07f6893cfe94a4a7c4aba4b643752808d4235.tar.gz
brctl: make it NOEXEC
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
-rw-r--r--NOFORK_NOEXEC.lst2
-rw-r--r--networking/brctl.c2
2 files changed, 2 insertions, 2 deletions
diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index 97b7d8b20..dc2828069 100644
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -53,7 +53,7 @@ blkdiscard
blkid
blockdev - noexec. leaks fd
bootchartd - daemon
-brctl
+brctl - noexec
bunzip2 - runner
busybox
bzcat - runner
diff --git a/networking/brctl.c b/networking/brctl.c
index 690791e4c..5d5f0af30 100644
--- a/networking/brctl.c
+++ b/networking/brctl.c
@@ -39,7 +39,7 @@
//config: Add support for option which prints the current config:
//config: show
-//applet:IF_BRCTL(APPLET(brctl, BB_DIR_USR_SBIN, BB_SUID_DROP))
+//applet:IF_BRCTL(APPLET_NOEXEC(brctl, brctl, BB_DIR_USR_SBIN, BB_SUID_DROP, brctl))
//kbuild:lib-$(CONFIG_BRCTL) += brctl.o