raidautorun: make it NOEXEC
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
This commit is contained in:
@@ -274,7 +274,7 @@ pscan - longterm
|
|||||||
pstree - noexec
|
pstree - noexec
|
||||||
pwd - NOFORK
|
pwd - NOFORK
|
||||||
pwdx - NOFORK
|
pwdx - NOFORK
|
||||||
raidautorun
|
raidautorun - noexec. very simple. leaks: open+xioctl
|
||||||
rdate - needs ^C (may talk to DNS servers, which may be down)
|
rdate - needs ^C (may talk to DNS servers, which may be down)
|
||||||
rdev - leaks: find_block_device -> readdir+xstrdup
|
rdev - leaks: find_block_device -> readdir+xstrdup
|
||||||
readlink - NOFORK
|
readlink - NOFORK
|
||||||
@@ -294,7 +294,7 @@ route - needs ^C (may talk to DNS servers, which may be down)
|
|||||||
rpm - runner
|
rpm - runner
|
||||||
rpm2cpio - runner
|
rpm2cpio - runner
|
||||||
rtcwake - longterm: puts system to sleep, optimizing this for speed is pointless
|
rtcwake - longterm: puts system to sleep, optimizing this for speed is pointless
|
||||||
run-parts
|
run-parts - longterm
|
||||||
runlevel - noexec. can be nofork if "endutxent()" is called unconditionally, but too rare to bother?
|
runlevel - noexec. can be nofork if "endutxent()" is called unconditionally, but too rare to bother?
|
||||||
runsv - daemon
|
runsv - daemon
|
||||||
runsvdir - daemon
|
runsvdir - daemon
|
||||||
|
@@ -15,7 +15,7 @@
|
|||||||
//config: raidautorun tells the kernel md driver to
|
//config: raidautorun tells the kernel md driver to
|
||||||
//config: search and start RAID arrays.
|
//config: search and start RAID arrays.
|
||||||
|
|
||||||
//applet:IF_RAIDAUTORUN(APPLET(raidautorun, BB_DIR_SBIN, BB_SUID_DROP))
|
//applet:IF_RAIDAUTORUN(APPLET_NOEXEC(raidautorun, raidautorun, BB_DIR_SBIN, BB_SUID_DROP, raidautorun))
|
||||||
|
|
||||||
//kbuild:lib-$(CONFIG_RAIDAUTORUN) += raidautorun.o
|
//kbuild:lib-$(CONFIG_RAIDAUTORUN) += raidautorun.o
|
||||||
|
|
||||||
|
Reference in New Issue
Block a user