Hi all,

This update to the patchset contains the following changes:
1. Re-implemented BB_EXECVE and BB_EXECVPE to use utility functions
like BB_APPLET_EXECVE and BB_APPLET_EXECVPE.
2. Introduced BB_APPLET_EXECVE, which copies argv to a new heap
allocated string array. This allows applets to modify argv like any
other C program, when executed using NOEXEC.
3. Introduced the FEATURE_ALWAYS_NOEXEC config options, which allows
overruling the NOEXEC decisions by allowing all applets to be executed
using NOEXEC. This feature is experimental, and I've made sure it is
clear in the name and description of the kconfig option.
4. Introduces BB_APPLET_EXECVPE, which uses BB_APPLET_EXECVE, but also
tries BB_APPLET_EXECVE with the basename of the given name, just in case
this might work better (e.g. BB_EXECVPE is called with /bin/ls, ls_main
is called instead).
5. Deny compilation of httpd with FEATURE_HTTPD_CGI when
FEATURE_FORCE_APPLETS is enabled, as it makes no sense to have these
together.
6. Make sure there are no unintended behavioural changes in ash - I've
reverted the change to execvpe due to oversights pointed by Ron.

BTW, should FEATURE_SH_STANDALONE exist at this point?
FEATURE_PREFER_APPLETS essentially does the exact same thing,
just at a broader scale. I have already made some changes that make
this config option obsolete.
WDYT?

Nadav

_______________________________________________
busybox mailing list
[email protected]
https://lists.busybox.net/mailman/listinfo/busybox

Reply via email to