busybox.conf: USER.GROUP is _optional_

function                                             old     new   delta
main                                                 785     809     +24

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>

1 files changed, 10 insertions, 7 deletions

diff --git a/Config.in b/Config.in
index b65fe4530..8f4d64274 100644
--- a/Config.in
+++ b/Config.in
@@ -350,15 +350,17 @@ config FEATURE_SUID_CONFIG
 	  by checking /etc/busybox.conf. (This is sort of a poor man's sudo.)
 	  The format of this file is as follows:
 
-	  APPLET = [Ssx-][Ssx-][x-] USER.GROUP
+	  APPLET = [Ssx-][Ssx-][x-] [USER.GROUP]
 
-	  s: This user/group are allowed to execute APPLET.
+	  s: USER or GROUP is allowed to execute APPLET.
+	     APPLET will run under USER or GROUP
+	     (reagardless of who's running it).
+	  S: USER or GROUP is NOT allowed to execute APPLET.
 	     APPLET will run under USER or GROUP.
-	  x: User/group/others are allowed to execute APPLET.
+	     This option is not very sensical.
+	  x: USER/GROUP/others are allowed to execute APPLET.
 	     No UID/GID change will be done when it is run.
-	  S: This user/group are NOT allowed to execute APPLET.
-	     APPLET will run under USER or GROUP.
-	  -: User/group/others are not allowed to execute APPLET.
+	  -: USER/GROUP/others are not allowed to execute APPLET.
 
 	  An example might help:
 
@@ -368,7 +370,8 @@ config FEATURE_SUID_CONFIG
 	  su = ssx        # exactly the same
 
 	  mount = sx- root.disk # applet mount can be run by root and members
-	                        # of group disk and runs with euid=0
+	                        # of group disk (but not anyone else)
+	                        # and runs with euid=0 (egid is not changed)
 
 	  cp = --- # disable applet cp for everyone