I'm using an embedded system with busybox v1.22.1, running Openwrt Chaos 
Chalmer r42321, mips24k AR9330

When I call 'busybox false --help', the return status is zero. I think it has 
nothing todo with openwrt, because it's the output of busybox, not the problem 
on openwrt performance. I feel it's strange, because GNU coreutils false binary 
gives return status 1, even when invoked with '--help' switch. I also notice 
that Ubuntu busybox false, which is version 1.21.1 performs the same behaviour 
as GNU coreutils.

Since /bin/false is linked to busybox and configured to disable login for 
daemon users, it will pose s security hole if this zero return status is 
exploited. I mark this as bug  because busybox false doesn't return 'false'.

Is this behaviour intended with busybox false implementation?

Thanks.
_______________________________________________
openwrt-devel mailing list
[email protected]
https://lists.openwrt.org/cgi-bin/mailman/listinfo/openwrt-devel

Reply via email to