Note: this is not a full review of the busybox package but rather a
difference assessement between the busybox-static and busybox package
(as part of this request).
The binary package "busybox" is quite similar to the static one and replaces
it. It produces a binary with the same name, linked against libc6 only.
A man page (same than the busybox-static one) is provided and a simple trigger
for update-initramfs is in place.
There is nothing special in the control or rules files.
I think this is thus +1 on the MIR-team side. However, as discussed,
switching for some part from a statically linked, in a limited
environment where busybox-static was running to a dynamically linked,
opened one. As discussed during the MIR meeting, this would need a
security assessment.
** Changed in: busybox (Ubuntu)
Assignee: Didier Roche (didrocks) => Ubuntu Security Team (ubuntu-security)
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1933979
Title:
[MIR] busybox package
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/busybox/+bug/1933979/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
