brctl: make it NOEXEC

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>

diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst
index 97b7d8b20968368597b26f02606453305dc952de..dc2828069adb5f57969d59fa30db22f3bf225553 100644 (file)
--- a/NOFORK_NOEXEC.lst
+++ b/NOFORK_NOEXEC.lst
@@ -53,7 +53,7 @@ blkdiscard
 blkid
 blockdev - noexec. leaks fd
 bootchartd - daemon
-brctl
+brctl - noexec
 bunzip2 - runner
 busybox
 bzcat - runner

diff --git a/networking/brctl.c b/networking/brctl.c
index 690791e4c65ef01cf4d26a5e4b187c6ba2a099d7..5d5f0af301fbfadcb9822ddcb47b180cfaaa0de0 100644 (file)
--- a/networking/brctl.c
+++ b/networking/brctl.c
@@ -39,7 +39,7 @@
 //config:      Add support for option which prints the current config:
 //config:              show
 
-//applet:IF_BRCTL(APPLET(brctl, BB_DIR_USR_SBIN, BB_SUID_DROP))
+//applet:IF_BRCTL(APPLET_NOEXEC(brctl, brctl, BB_DIR_USR_SBIN, BB_SUID_DROP, brctl))
 
 //kbuild:lib-$(CONFIG_BRCTL) += brctl.o