a453ca576
Denys Vlasenko
2017-08-05
Subject
sv, svc: make them NOEXEC
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
NOFORK_NOEXEC.lst+2 -2
| @@ -334,8 +334,8 @@ stty - noexec. nofork candidate: has no allocs or opens except xmove_fd(xopen("- | |
| su - suid, spawner | |
| sulogin - noexec. spawner | |
| sum - runner | |
| - | sv - noexec candidate, needs ^C (uses usleep(420000)) |
| - | svc - noexec candidate, needs ^C (uses usleep(420000)) |
| + | sv - noexec. needs ^C (uses usleep(420000)) |
| + | svc - noexec. needs ^C (uses usleep(420000)) |
| svlogd - daemon | |
| swapoff - rare | |
| swapon - rare | |
runit/sv.c+2 -2
| @@ -175,8 +175,8 @@ Exit Codes | |
| //config: svc controls the state of services monitored by the runsv supervisor. | |
| //config: It is comaptible with daemontools command with the same name. | |
| - | //applet:IF_SV(APPLET(sv, BB_DIR_USR_BIN, BB_SUID_DROP)) |
| - | //applet:IF_SVC(APPLET(svc, BB_DIR_USR_BIN, BB_SUID_DROP)) |
| + | //applet:IF_SV( APPLET_NOEXEC(sv, sv, BB_DIR_USR_BIN, BB_SUID_DROP, sv )) |
| + | //applet:IF_SVC(APPLET_NOEXEC(svc, svc, BB_DIR_USR_BIN, BB_SUID_DROP, svc)) |
| //kbuild:lib-$(CONFIG_SV) += sv.o | |
| //kbuild:lib-$(CONFIG_SVC) += sv.o | |