mirror of
https://github.com/sheumann/hush.git
synced 2024-12-21 23:29:34 +00:00
Enabling runtime SUID/SGID configuration via /etc/busybox.conf
is not a very good default. Better to default to having it off and let people get the default behavior. If they want to enable /etc/busybox.conf they should explicitly ask for it.
This commit is contained in:
parent
576db48ef0
commit
5043ea1986
@ -94,14 +94,14 @@ config CONFIG_FEATURE_SUID
|
|||||||
|
|
||||||
config CONFIG_FEATURE_SUID_CONFIG
|
config CONFIG_FEATURE_SUID_CONFIG
|
||||||
bool "Runtime SUID/SGID configuration via /etc/busybox.conf"
|
bool "Runtime SUID/SGID configuration via /etc/busybox.conf"
|
||||||
default y if CONFIG_FEATURE_SUID
|
default n if CONFIG_FEATURE_SUID
|
||||||
depends on CONFIG_FEATURE_SUID
|
depends on CONFIG_FEATURE_SUID
|
||||||
help
|
help
|
||||||
Allow the SUID / SGID state of an applet to be determined runtime by
|
Allow the SUID / SGID state of an applet to be determined runtime by
|
||||||
checking /etc/busybox.conf. The format of this file is as follows:
|
checking /etc/busybox.conf. The format of this file is as follows:
|
||||||
|
|
||||||
<applet> = [Ssx-][Ssx-][x-] (<username>|<uid>).(<groupname>|<gid>)
|
<applet> = [Ssx-][Ssx-][x-] (<username>|<uid>).(<groupname>|<gid>)
|
||||||
|
|
||||||
An example might help:
|
An example might help:
|
||||||
|
|
||||||
[SUID]
|
[SUID]
|
||||||
|
Loading…
Reference in New Issue
Block a user