From a759b22c29fed7d6c77efe0c3e27772371d0889b Mon Sep 17 00:00:00 2001 From: Denys Vlasenko Date: Sun, 6 Aug 2017 14:15:24 +0200 Subject: nameif: make it NOEXEC Signed-off-by: Denys Vlasenko --- NOFORK_NOEXEC.lst | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) (limited to 'NOFORK_NOEXEC.lst') diff --git a/NOFORK_NOEXEC.lst b/NOFORK_NOEXEC.lst index 45b178ca8..9b33afc32 100644 --- a/NOFORK_NOEXEC.lst +++ b/NOFORK_NOEXEC.lst @@ -237,10 +237,10 @@ modprobe - noexec more - interactive, longterm mount - suid mountpoint - noexec. leaks: option -n "print dev name": find_block_device -> readdir+xstrdup -mpstat - noexec candidate (it's a measuring tool, putting less load by itself is good), complex +mpstat - longterm: "mpstat 1" runs indefinitely mt - rare mv - noexec candidate, runner -nameif - leaks: config_open2+ioctl_or_perror_and_die +nameif - noexec. openlog(), leaks: config_open2+ioctl_or_perror_and_die nbd-client nc - runner netstat - runner with -c -- cgit v1.2.3