b63afead4
Denys Vlasenko
2017-09-18
Subject
ip,ip*: make them NOEXEC
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
NOFORK_NOEXEC.lst+7 -7
| @@ -187,16 +187,16 @@ insmod - noexec | |
| install - runner | |
| ionice - noexec. spawner | |
| iostat - longterm: "iostat 1" runs indefinitely | |
| - | ip - noexec candidate |
| - | ipaddr - noexec candidate |
| + | ip - noexec |
| + | ipaddr - noexec |
| ipcalc - noexec. ipcalc -h talks to network | |
| ipcrm - noexec | |
| ipcs - noexec | |
| - | iplink - noexec candidate |
| - | ipneigh - noexec candidate |
| - | iproute - noexec candidate |
| - | iprule - noexec candidate |
| - | iptunnel - noexec candidate |
| + | iplink - noexec |
| + | ipneigh - noexec |
| + | iproute - noexec |
| + | iprule - noexec |
| + | iptunnel - noexec |
| kbd_mode - noexec. leaks: xopen_nonblocking+xioctl | |
| kill - NOFORK | |
| killall - NOFORK | |
networking/ip.c+7 -7
| @@ -126,13 +126,13 @@ | |
| //config: Ethernet, wireless, infrared, ppp/slip, ip tunnelling | |
| //config: link types are supported without this option selected. | |
| - | //applet:IF_IP(APPLET(ip, BB_DIR_SBIN, BB_SUID_DROP)) |
| - | //applet:IF_IPADDR(APPLET(ipaddr, BB_DIR_SBIN, BB_SUID_DROP)) |
| - | //applet:IF_IPLINK(APPLET(iplink, BB_DIR_SBIN, BB_SUID_DROP)) |
| - | //applet:IF_IPROUTE(APPLET(iproute, BB_DIR_SBIN, BB_SUID_DROP)) |
| - | //applet:IF_IPRULE(APPLET(iprule, BB_DIR_SBIN, BB_SUID_DROP)) |
| - | //applet:IF_IPTUNNEL(APPLET(iptunnel, BB_DIR_SBIN, BB_SUID_DROP)) |
| - | //applet:IF_IPNEIGH(APPLET(ipneigh, BB_DIR_SBIN, BB_SUID_DROP)) |
| + | //applet:IF_IP( APPLET_NOEXEC(ip , ip , BB_DIR_SBIN, BB_SUID_DROP, ip )) |
| + | //applet:IF_IPADDR( APPLET_NOEXEC(ipaddr , ipaddr , BB_DIR_SBIN, BB_SUID_DROP, ipaddr )) |
| + | //applet:IF_IPLINK( APPLET_NOEXEC(iplink , iplink , BB_DIR_SBIN, BB_SUID_DROP, iplink )) |
| + | //applet:IF_IPROUTE( APPLET_NOEXEC(iproute , iproute , BB_DIR_SBIN, BB_SUID_DROP, iproute )) |
| + | //applet:IF_IPRULE( APPLET_NOEXEC(iprule , iprule , BB_DIR_SBIN, BB_SUID_DROP, iprule )) |
| + | //applet:IF_IPTUNNEL(APPLET_NOEXEC(iptunnel, iptunnel, BB_DIR_SBIN, BB_SUID_DROP, iptunnel)) |
| + | //applet:IF_IPNEIGH( APPLET_NOEXEC(ipneigh , ipneigh , BB_DIR_SBIN, BB_SUID_DROP, ipneigh )) |
| //kbuild:lib-$(CONFIG_IP) += ip.o | |
| //kbuild:lib-$(CONFIG_IPADDR) += ip.o | |