diff options
| author | Denys Vlasenko <vda.linux@googlemail.com> | 2017-08-07 00:28:15 +0200 |
|---|---|---|
| committer | Denys Vlasenko <vda.linux@googlemail.com> | 2017-08-07 00:28:15 +0200 |
| commit | 7b8372b81926ef6aa8d91945a95261bbb93d0b9e (patch) | |
| tree | 9a125f00f6dc2c324e24c7f1bb2952ae78a1165a /NOFORK_NOEXEC.lst | |
| parent | bfc66d49806a4305014b12bbe078484b2da6f93f (diff) | |
| download | busybox-7b8372b81926ef6aa8d91945a95261bbb93d0b9e.tar.gz | |
add/remove-shell,add/deluser,add/delgroup: make them NOEXEC
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
Diffstat (limited to 'NOFORK_NOEXEC.lst')
| -rw-r--r-- | NOFORK_NOEXEC.lst | 12 |
1 files changed, 6 insertions, 6 deletions
diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst index 9c8df23ab..ac04f75da 100644 --- a/NOFORK_NOEXEC.lst +++ b/NOFORK_NOEXEC.lst @@ -36,9 +36,9 @@ IOW: rm is "interactive", but not "longterm". [ - NOFORK [[ - NOFORK acpid - daemon -add-shell -addgroup -adduser +add-shell - noexec. leaks: open+xfunc +addgroup - noexec. leaks +adduser - noexec. leaks adjtimex - NOFORK ar - runner arch - NOFORK @@ -86,8 +86,8 @@ date - noexec. nofork candidate(needs to stop messing up env, free xasprintf res dc - runner (eats stdin if no params) dd - noexec. runner deallocvt - noexec. leaks: get_console_fd_or_die() may open a new fd, or return one of stdio fds -delgroup -deluser +delgroup - noexec. leaks +deluser - noexec. leaks depmod - complex, rare devmem - runner, complex (access to device memory may hang) df - leaks: nested allocs @@ -282,7 +282,7 @@ readprofile - reads /boot/System.map and /proc/profile, better to free more memo realpath - NOFORK reboot - rare reformime - runner -remove-shell +remove-shell - noexec. leaks: open+xfunc renice - nofork candidate(uses getpwnam, is that ok?) reset - noexec. spawner (execs "stty") resize - noexec. changes state (signal handlers) |