[git commit] NOFORK_NOEXEC.sh: a script to find "interesting" applets

Denys Vlasenko vda.linux at googlemail.com
Sun Jan 14 13:44:30 UTC 2018


commit: https://git.busybox.net/busybox/commit/?id=6f1c942a31fc517e0be53ccc55d5162b2c7806aa
branch: https://git.busybox.net/busybox/commit/?id=refs/heads/master

Signed-off-by: Denys Vlasenko <vda.linux at googlemail.com>
---
 NOFORK_NOEXEC.sh | 34 ++++++++++++++++++++++++++++++++++
 1 file changed, 34 insertions(+)

diff --git a/NOFORK_NOEXEC.sh b/NOFORK_NOEXEC.sh
new file mode 100755
index 0000000..f4eeeef
--- /dev/null
+++ b/NOFORK_NOEXEC.sh
@@ -0,0 +1,34 @@
+#!/bin/sh
+
+exec >NOFORK_NOEXEC.lst1
+
+false && grep -Fv 'NOFORK' NOFORK_NOEXEC.lst \
+| grep -v 'noexec.' | grep -v 'noexec$' \
+| grep -v ' suid' \
+| grep -v ' daemon' \
+| grep -v ' longterm' \
+| grep rare
+
+echo === nofork candidate
+grep -F 'nofork candidate' NOFORK_NOEXEC.lst \
+
+echo === noexec candidate
+grep -F 'noexec candidate' NOFORK_NOEXEC.lst \
+
+echo === ^C
+grep -F '^C' NOFORK_NOEXEC.lst \
+| grep -F ' - ' \
+
+echo === talks
+grep -F 'talks' NOFORK_NOEXEC.lst \
+| grep -F ' - ' \
+
+echo ===
+grep -Fv 'NOFORK' NOFORK_NOEXEC.lst \
+| grep '^[^ ][^ ]* - ' \
+| grep -v 'noexec.' | grep -v ' - noexec$' \
+| grep -v ' suid' \
+| grep -v ' daemon' \
+| grep -v 'longterm' \
+| grep -v 'interactive' \
+| grep -v 'hardware' \


More information about the busybox-cvs mailing list