9a58cc0f7
Denys Vlasenko
2017-08-06
Subject
tunctl: make it NOEXEC
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
NOFORK_NOEXEC.lst+2 -2
| @@ -182,7 +182,7 @@ ipneigh - noexec candidate | |
| iproute - noexec candidate | |
| iprule - noexec candidate | |
| iptunnel - noexec candidate | |
| - | kbd_mode - leaks: xopen_nonblocking+xioctl |
| + | kbd_mode - noexec. leaks: xopen_nonblocking+xioctl |
| kill - NOFORK | |
| killall - NOFORK | |
| killall5 - NOFORK | |
| @@ -365,7 +365,7 @@ true - NOFORK | |
| truncate - NOFORK | |
| tty - NOFORK | |
| ttysize - NOFORK | |
| - | tunctl |
| + | tunctl - noexec |
| tune2fs - noexec. leaks: open+xfunc | |
| ubiattach | |
| ubidetach | |
networking/tunctl.c+1 -1
| @@ -24,7 +24,7 @@ | |
| //config: Allow to specify owner and group of newly created interface. | |
| //config: 340 bytes of pure bloat. Say no here. | |
| - | //applet:IF_TUNCTL(APPLET(tunctl, BB_DIR_SBIN, BB_SUID_DROP)) |
| + | //applet:IF_TUNCTL(APPLET_NOEXEC(tunctl, tunctl, BB_DIR_SBIN, BB_SUID_DROP, tunctl)) |
| //kbuild:lib-$(CONFIG_TUNCTL) += tunctl.o | |