stop giving root rights to dnsd, ipcrm, ipcs
authorDenys Vlasenko <vda.linux@googlemail.com>
Sun, 9 Jan 2011 20:54:50 +0000 (21:54 +0100)
committerDenys Vlasenko <vda.linux@googlemail.com>
Sun, 9 Jan 2011 20:54:50 +0000 (21:54 +0100)
Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
include/applets.src.h

index 261ef23334ce5359965f19d91d4b5eb551333f70..691e097c1330a609152d07791bf7f00b866731c3 100644 (file)
@@ -118,8 +118,7 @@ IF_DHCPRELAY(APPLET(dhcprelay, _BB_DIR_USR_SBIN, _BB_SUID_DROP))
 IF_DIFF(APPLET(diff, _BB_DIR_USR_BIN, _BB_SUID_DROP))
 IF_DIRNAME(APPLET_NOFORK(dirname, dirname, _BB_DIR_USR_BIN, _BB_SUID_DROP, dirname))
 IF_DMESG(APPLET(dmesg, _BB_DIR_BIN, _BB_SUID_DROP))
-/* Why _BB_SUID_REQUIRE? */
-IF_DNSD(APPLET(dnsd, _BB_DIR_USR_SBIN, _BB_SUID_REQUIRE))
+IF_DNSD(APPLET(dnsd, _BB_DIR_USR_SBIN, _BB_SUID_DROP))
 IF_HOSTNAME(APPLET_ODDNAME(dnsdomainname, hostname, _BB_DIR_BIN, _BB_SUID_DROP, dnsdomainname))
 IF_DOS2UNIX(APPLET_NOEXEC(dos2unix, dos2unix, _BB_DIR_USR_BIN, _BB_SUID_DROP, dos2unix))
 IF_DPKG(APPLET(dpkg, _BB_DIR_USR_BIN, _BB_SUID_DROP))
@@ -198,10 +197,8 @@ IF_IP(APPLET(ip, _BB_DIR_BIN, _BB_SUID_DROP))
 #endif
 IF_IPADDR(APPLET(ipaddr, _BB_DIR_BIN, _BB_SUID_DROP))
 IF_IPCALC(APPLET(ipcalc, _BB_DIR_BIN, _BB_SUID_DROP))
-/* Why _BB_SUID_REQUIRE? On Fedora, it isn't suid root */
-IF_IPCRM(APPLET(ipcrm, _BB_DIR_USR_BIN, _BB_SUID_REQUIRE))
-/* Why _BB_SUID_REQUIRE? On Fedora, it isn't suid root */
-IF_IPCS(APPLET(ipcs, _BB_DIR_USR_BIN, _BB_SUID_REQUIRE))
+IF_IPCRM(APPLET(ipcrm, _BB_DIR_USR_BIN, _BB_SUID_DROP))
+IF_IPCS(APPLET(ipcs, _BB_DIR_USR_BIN, _BB_SUID_DROP))
 IF_IPLINK(APPLET(iplink, _BB_DIR_BIN, _BB_SUID_DROP))
 IF_IPROUTE(APPLET(iproute, _BB_DIR_BIN, _BB_SUID_DROP))
 IF_IPRULE(APPLET(iprule, _BB_DIR_BIN, _BB_SUID_DROP))