stop giving root rights to dnsd, ipcrm, ipcs
No binary (build failed)
—
(log yok)
| @@ -118,8 +118,7 @@ IF_DHCPRELAY(APPLET(dhcprelay, _BB_DIR_USR_SBIN, _BB_SUID_DROP)) | |
| IF_DIFF(APPLET(diff, _BB_DIR_USR_BIN, _BB_SUID_DROP)) | |
| IF_DIRNAME(APPLET_NOFORK(dirname, dirname, _BB_DIR_USR_BIN, _BB_SUID_DROP, dirname)) | |
| IF_DMESG(APPLET(dmesg, _BB_DIR_BIN, _BB_SUID_DROP)) | |
| - | /* Why _BB_SUID_REQUIRE? */ |
| - | IF_DNSD(APPLET(dnsd, _BB_DIR_USR_SBIN, _BB_SUID_REQUIRE)) |
| + | IF_DNSD(APPLET(dnsd, _BB_DIR_USR_SBIN, _BB_SUID_DROP)) |
| IF_HOSTNAME(APPLET_ODDNAME(dnsdomainname, hostname, _BB_DIR_BIN, _BB_SUID_DROP, dnsdomainname)) | |
| IF_DOS2UNIX(APPLET_NOEXEC(dos2unix, dos2unix, _BB_DIR_USR_BIN, _BB_SUID_DROP, dos2unix)) | |
| IF_DPKG(APPLET(dpkg, _BB_DIR_USR_BIN, _BB_SUID_DROP)) | |
| @@ -198,10 +197,8 @@ IF_IP(APPLET(ip, _BB_DIR_BIN, _BB_SUID_DROP)) | |
| #endif | |
| IF_IPADDR(APPLET(ipaddr, _BB_DIR_BIN, _BB_SUID_DROP)) | |
| IF_IPCALC(APPLET(ipcalc, _BB_DIR_BIN, _BB_SUID_DROP)) | |
| - | /* Why _BB_SUID_REQUIRE? On Fedora, it isn't suid root */ |
| - | IF_IPCRM(APPLET(ipcrm, _BB_DIR_USR_BIN, _BB_SUID_REQUIRE)) |
| - | /* Why _BB_SUID_REQUIRE? On Fedora, it isn't suid root */ |
| - | IF_IPCS(APPLET(ipcs, _BB_DIR_USR_BIN, _BB_SUID_REQUIRE)) |
| + | IF_IPCRM(APPLET(ipcrm, _BB_DIR_USR_BIN, _BB_SUID_DROP)) |
| + | IF_IPCS(APPLET(ipcs, _BB_DIR_USR_BIN, _BB_SUID_DROP)) |
| IF_IPLINK(APPLET(iplink, _BB_DIR_BIN, _BB_SUID_DROP)) | |
| IF_IPROUTE(APPLET(iproute, _BB_DIR_BIN, _BB_SUID_DROP)) | |
| IF_IPRULE(APPLET(iprule, _BB_DIR_BIN, _BB_SUID_DROP)) | |