aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDenys Vlasenko <vda.linux@googlemail.com>2017-08-09 18:52:19 +0200
committerDenys Vlasenko <vda.linux@googlemail.com>2017-08-09 18:52:19 +0200
commita4d4ab04c3706af1cb2f65fb00c96d3ccba1020c (patch)
tree58cea649f7d923f07494b8598666126610f15c22
parent9be166b5dd5161ea537d662660cc0142aa2db92b (diff)
downloadbusybox-a4d4ab04c3706af1cb2f65fb00c96d3ccba1020c.tar.gz
vconfig: make it NOEXEC
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
-rw-r--r--NOFORK_NOEXEC.lst2
-rw-r--r--networking/vconfig.c2
2 files changed, 2 insertions, 2 deletions
diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index bfb76a12e..063d7cd48 100644
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -400,7 +400,7 @@ users - noexec. nofork candidate(is getutxent ok?)
usleep - NOFORK
uudecode - runner
uuencode - runner
-vconfig - leaks: xsocket+ioctl_or_perror_and_die
+vconfig - noexec. leaks: xsocket+ioctl_or_perror_and_die
vi - interactive, longterm
vlock - suid
volname - hardware (reads CDROM, this can take long-ish if need to spin up)
diff --git a/networking/vconfig.c b/networking/vconfig.c
index e6e2872bf..62a483865 100644
--- a/networking/vconfig.c
+++ b/networking/vconfig.c
@@ -16,7 +16,7 @@
//config: help
//config: Creates, removes, and configures VLAN interfaces
-//applet:IF_VCONFIG(APPLET(vconfig, BB_DIR_SBIN, BB_SUID_DROP))
+//applet:IF_VCONFIG(APPLET_NOEXEC(vconfig, vconfig, BB_DIR_SBIN, BB_SUID_DROP, vconfig))
//kbuild:lib-$(CONFIG_VCONFIG) += vconfig.o