Enabling runtime SUID/SGID configuration via /etc/busybox.conf
is not a very good default. Better to default to having it off and let people get the default behavior. If they want to enable /etc/busybox.conf they should explicitly ask for it.
This commit is contained in:
parent
576db48ef0
commit
5043ea1986
@ -94,14 +94,14 @@ config CONFIG_FEATURE_SUID
|
||||
|
||||
config CONFIG_FEATURE_SUID_CONFIG
|
||||
bool "Runtime SUID/SGID configuration via /etc/busybox.conf"
|
||||
default y if CONFIG_FEATURE_SUID
|
||||
default n if CONFIG_FEATURE_SUID
|
||||
depends on CONFIG_FEATURE_SUID
|
||||
help
|
||||
Allow the SUID / SGID state of an applet to be determined runtime by
|
||||
checking /etc/busybox.conf. The format of this file is as follows:
|
||||
|
||||
<applet> = [Ssx-][Ssx-][x-] (<username>|<uid>).(<groupname>|<gid>)
|
||||
|
||||
|
||||
An example might help:
|
||||
|
||||
[SUID]
|
||||
|
Loading…
Reference in New Issue
Block a user