summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorDenys Vlasenko <vda.linux@googlemail.com>2011-01-09 20:54:50 (GMT)
committer Denys Vlasenko <vda.linux@googlemail.com>2011-01-09 20:54:50 (GMT)
commit7b305646e12536e9aa62d2768d48bf2d2d78caa5 (patch)
treed490323502fd68cc5521a095901120a6230dcece
parentbcdb9b8762d14634afb570fe48db9fa62d8c0109 (diff)
downloadbusybox-7b305646e12536e9aa62d2768d48bf2d2d78caa5.tar.gz
busybox-7b305646e12536e9aa62d2768d48bf2d2d78caa5.tar.bz2
stop giving root rights to dnsd, ipcrm, ipcs
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
-rw-r--r--include/applets.src.h9
1 files changed, 3 insertions, 6 deletions
diff --git a/include/applets.src.h b/include/applets.src.h
index 261ef23..691e097 100644
--- a/include/applets.src.h
+++ b/include/applets.src.h
@@ -118,8 +118,7 @@ IF_DHCPRELAY(APPLET(dhcprelay, _BB_DIR_USR_SBIN, _BB_SUID_DROP))
IF_DIFF(APPLET(diff, _BB_DIR_USR_BIN, _BB_SUID_DROP))
IF_DIRNAME(APPLET_NOFORK(dirname, dirname, _BB_DIR_USR_BIN, _BB_SUID_DROP, dirname))
IF_DMESG(APPLET(dmesg, _BB_DIR_BIN, _BB_SUID_DROP))
-/* Why _BB_SUID_REQUIRE? */
-IF_DNSD(APPLET(dnsd, _BB_DIR_USR_SBIN, _BB_SUID_REQUIRE))
+IF_DNSD(APPLET(dnsd, _BB_DIR_USR_SBIN, _BB_SUID_DROP))
IF_HOSTNAME(APPLET_ODDNAME(dnsdomainname, hostname, _BB_DIR_BIN, _BB_SUID_DROP, dnsdomainname))
IF_DOS2UNIX(APPLET_NOEXEC(dos2unix, dos2unix, _BB_DIR_USR_BIN, _BB_SUID_DROP, dos2unix))
IF_DPKG(APPLET(dpkg, _BB_DIR_USR_BIN, _BB_SUID_DROP))
@@ -198,10 +197,8 @@ IF_IP(APPLET(ip, _BB_DIR_BIN, _BB_SUID_DROP))
#endif
IF_IPADDR(APPLET(ipaddr, _BB_DIR_BIN, _BB_SUID_DROP))
IF_IPCALC(APPLET(ipcalc, _BB_DIR_BIN, _BB_SUID_DROP))
-/* Why _BB_SUID_REQUIRE? On Fedora, it isn't suid root */
-IF_IPCRM(APPLET(ipcrm, _BB_DIR_USR_BIN, _BB_SUID_REQUIRE))
-/* Why _BB_SUID_REQUIRE? On Fedora, it isn't suid root */
-IF_IPCS(APPLET(ipcs, _BB_DIR_USR_BIN, _BB_SUID_REQUIRE))
+IF_IPCRM(APPLET(ipcrm, _BB_DIR_USR_BIN, _BB_SUID_DROP))
+IF_IPCS(APPLET(ipcs, _BB_DIR_USR_BIN, _BB_SUID_DROP))
IF_IPLINK(APPLET(iplink, _BB_DIR_BIN, _BB_SUID_DROP))
IF_IPROUTE(APPLET(iproute, _BB_DIR_BIN, _BB_SUID_DROP))
IF_IPRULE(APPLET(iprule, _BB_DIR_BIN, _BB_SUID_DROP))