ec98e3a62
Denys Vlasenko
2017-08-07
Subject
freeramdisk: make NOEXEC
Binary
No binary (build failed)
Architecture & Compiler Flags
—
Build Log
(log yok)
Commit Diff GitHub →
NOFORK_NOEXEC.lst+1 -1
| @@ -134,7 +134,7 @@ flashcp - hardware | |
| flock - spawner, changes state (file locks), let's play safe and not be noexec | |
| fold - noexec. runner | |
| free - noexec. nofork candidate(struct globals, needs to close /proc/meminfo fd) | |
| - | freeramdisk - leaks: open+ioctl_or_perror_and_die |
| + | freeramdisk - noexec. leaks: open+ioctl_or_perror_and_die |
| fsck - interactive, longterm | |
| fsck.minix - needs ^C | |
| fsfreeze - noexec. leaks: open+xioctl | |
util-linux/freeramdisk.c+3 -3
| @@ -33,9 +33,9 @@ | |
| //config: ramdisk. If you have no use for freeing memory from a ramdisk, leave | |
| //config: this disabled. | |
| - | // APPLET_ODDNAME:name main location suid_type help |
| - | //applet:IF_FDFLUSH(APPLET_ODDNAME(fdflush, freeramdisk, BB_DIR_BIN, BB_SUID_DROP, fdflush)) |
| - | //applet:IF_FREERAMDISK(APPLET(freeramdisk, BB_DIR_SBIN, BB_SUID_DROP)) |
| + | // APPLET_ODDNAME:name main location suid_type help |
| + | //applet:IF_FDFLUSH( APPLET_ODDNAME(fdflush, freeramdisk, BB_DIR_BIN, BB_SUID_DROP, fdflush )) |
| + | //applet:IF_FREERAMDISK(APPLET_NOEXEC(freeramdisk, freeramdisk, BB_DIR_SBIN, BB_SUID_DROP, freeramdisk)) |
| //kbuild:lib-$(CONFIG_FDFLUSH) += freeramdisk.o | |
| //kbuild:lib-$(CONFIG_FREERAMDISK) += freeramdisk.o | |