Remove busybox from buildroot

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP











up vote
3
down vote

favorite












As part of Linux hardening we want to remove busybox from filesystem created with buildroot.



But I am not sure if system can boot without it.



I am quite sure that there are init files that depends on busybox.



Is it possible to boot without busybox or does it require a custom init ?






boot busybox init buildroot hardening







share|improve this question























  • Is it for a bare metal system, a VM, or for a Docker container? busybox contains all the commands so it is not easy to remove.
    – xenoid
    9 hours ago










  • Which distribution? Why have you not made a test in a VM yet,?
    – Rui F Ribeiro
    9 hours ago










  • What kind of system is it? Why do you think that removing a program would harden your system?
    – Gilles
    9 hours ago










  • It is for buildroot. I might have forgotten to mention it. I edited the question.
    – ransh
    6 hours ago















up vote
3
down vote

favorite












As part of Linux hardening we want to remove busybox from filesystem created with buildroot.



But I am not sure if system can boot without it.



I am quite sure that there are init files that depends on busybox.



Is it possible to boot without busybox or does it require a custom init ?






boot busybox init buildroot hardening







share|improve this question























  • Is it for a bare metal system, a VM, or for a Docker container? busybox contains all the commands so it is not easy to remove.
    – xenoid
    9 hours ago










  • Which distribution? Why have you not made a test in a VM yet,?
    – Rui F Ribeiro
    9 hours ago










  • What kind of system is it? Why do you think that removing a program would harden your system?
    – Gilles
    9 hours ago










  • It is for buildroot. I might have forgotten to mention it. I edited the question.
    – ransh
    6 hours ago













up vote
3
down vote

favorite









up vote
3
down vote

favorite











As part of Linux hardening we want to remove busybox from filesystem created with buildroot.



But I am not sure if system can boot without it.



I am quite sure that there are init files that depends on busybox.



Is it possible to boot without busybox or does it require a custom init ?






boot busybox init buildroot hardening







share|improve this question















As part of Linux hardening we want to remove busybox from filesystem created with buildroot.



But I am not sure if system can boot without it.



I am quite sure that there are init files that depends on busybox.



Is it possible to boot without busybox or does it require a custom init ?






boot busybox init buildroot hardening




boot busybox init buildroot hardening






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited 20 mins ago

























asked 9 hours ago









ransh

383249




383249











  • Is it for a bare metal system, a VM, or for a Docker container? busybox contains all the commands so it is not easy to remove.
    – xenoid
    9 hours ago










  • Which distribution? Why have you not made a test in a VM yet,?
    – Rui F Ribeiro
    9 hours ago










  • What kind of system is it? Why do you think that removing a program would harden your system?
    – Gilles
    9 hours ago










  • It is for buildroot. I might have forgotten to mention it. I edited the question.
    – ransh
    6 hours ago

















  • Is it for a bare metal system, a VM, or for a Docker container? busybox contains all the commands so it is not easy to remove.
    – xenoid
    9 hours ago










  • Which distribution? Why have you not made a test in a VM yet,?
    – Rui F Ribeiro
    9 hours ago










  • What kind of system is it? Why do you think that removing a program would harden your system?
    – Gilles
    9 hours ago










  • It is for buildroot. I might have forgotten to mention it. I edited the question.
    – ransh
    6 hours ago
















Is it for a bare metal system, a VM, or for a Docker container? busybox contains all the commands so it is not easy to remove.
– xenoid
9 hours ago




Is it for a bare metal system, a VM, or for a Docker container? busybox contains all the commands so it is not easy to remove.
– xenoid
9 hours ago












Which distribution? Why have you not made a test in a VM yet,?
– Rui F Ribeiro
9 hours ago




Which distribution? Why have you not made a test in a VM yet,?
– Rui F Ribeiro
9 hours ago












What kind of system is it? Why do you think that removing a program would harden your system?
– Gilles
9 hours ago




What kind of system is it? Why do you think that removing a program would harden your system?
– Gilles
9 hours ago












It is for buildroot. I might have forgotten to mention it. I edited the question.
– ransh
6 hours ago





It is for buildroot. I might have forgotten to mention it. I edited the question.
– ransh
6 hours ago











2 Answers
2






active

oldest

votes

















up vote
4
down vote













It all depends on whether your distro uses Busybox for init.



To point you in the right direction, run ls -l /sbin/init.



If you get something like the following (example from OpenWRT):



~# ls -l /sbin/init
-rwxr-xr-x 1 root root 10824 Jan 31 2016 /sbin/init


It means init is a different application and you may be able to remove Busybox. You'll still need to replace all the command init requires with alternatives as Busybox provides many tools required for booting successfully.



However, if you get (example from Alpine Linux):



~$ ls -l /sbin/init
lrwxrwxrwx 1 root root 12 May 3 04:49 /sbin/init -> /bin/busybox


It means init is provided by Busybox and you'll not be able to boot unless you can replace Busybox's init with an alternative.



You have to consider whether you are really hardening your system by doing this as you'll end up replacing one binary with many.






share|improve this answer


















  • 1




    Even if init itself isn't the one from Busybox, if a system has Busybox, it probably has other critical programs provided by Busybox, for example sh.
    – Gilles
    9 hours ago










  • @Gilles - edited and added as you commented :-)
    – garethTheRed
    9 hours ago










  • Using this solution, does buildroot provide the option to entirely remove busybox from buildroot ?
    – ransh
    20 mins ago

















up vote
3
down vote













I routinely delete busybox in my master template/Debian VMs.



As for Debian, it is a matter of not allowing it to install both the busybox and busybox-staticpackages.



You just have to keep in mind the recovery/rescue options will be more limited in a system without it. e.g. I might keep it on a physical system, I delete it as a norm form VMs to save space and under the Unix old golden rule of keeping the minimum of software installed.



At least speaking for Debian, the uninstall makes the necessary modifications in the background, and it is neither necessary to do any extra steps nor customizing anything.






share|improve this answer




















  • I forgot to mention that I use buildroot (just edit the question). So this solution may not be relevant in my case.
    – ransh
    6 hours ago










Your Answer







StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "106"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: false,
noModals: false,
showLowRepImageUploadWarning: true,
reputationToPostImages: null,
bindNavPrevention: true,
postfix: "",
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);













 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f476685%2fremove-busybox-from-buildroot%23new-answer', 'question_page');

);

Post as a guest

















2 Answers
2






active

oldest

votes








2 Answers
2






active

oldest

votes









active

oldest

votes






active

oldest

votes








up vote
4
down vote













It all depends on whether your distro uses Busybox for init.



To point you in the right direction, run ls -l /sbin/init.



If you get something like the following (example from OpenWRT):



~# ls -l /sbin/init
-rwxr-xr-x 1 root root 10824 Jan 31 2016 /sbin/init


It means init is a different application and you may be able to remove Busybox. You'll still need to replace all the command init requires with alternatives as Busybox provides many tools required for booting successfully.



However, if you get (example from Alpine Linux):



~$ ls -l /sbin/init
lrwxrwxrwx 1 root root 12 May 3 04:49 /sbin/init -> /bin/busybox


It means init is provided by Busybox and you'll not be able to boot unless you can replace Busybox's init with an alternative.



You have to consider whether you are really hardening your system by doing this as you'll end up replacing one binary with many.






share|improve this answer


















  • 1




    Even if init itself isn't the one from Busybox, if a system has Busybox, it probably has other critical programs provided by Busybox, for example sh.
    – Gilles
    9 hours ago










  • @Gilles - edited and added as you commented :-)
    – garethTheRed
    9 hours ago










  • Using this solution, does buildroot provide the option to entirely remove busybox from buildroot ?
    – ransh
    20 mins ago














up vote
4
down vote













It all depends on whether your distro uses Busybox for init.



To point you in the right direction, run ls -l /sbin/init.



If you get something like the following (example from OpenWRT):



~# ls -l /sbin/init
-rwxr-xr-x 1 root root 10824 Jan 31 2016 /sbin/init


It means init is a different application and you may be able to remove Busybox. You'll still need to replace all the command init requires with alternatives as Busybox provides many tools required for booting successfully.



However, if you get (example from Alpine Linux):



~$ ls -l /sbin/init
lrwxrwxrwx 1 root root 12 May 3 04:49 /sbin/init -> /bin/busybox


It means init is provided by Busybox and you'll not be able to boot unless you can replace Busybox's init with an alternative.



You have to consider whether you are really hardening your system by doing this as you'll end up replacing one binary with many.






share|improve this answer


















  • 1




    Even if init itself isn't the one from Busybox, if a system has Busybox, it probably has other critical programs provided by Busybox, for example sh.
    – Gilles
    9 hours ago










  • @Gilles - edited and added as you commented :-)
    – garethTheRed
    9 hours ago










  • Using this solution, does buildroot provide the option to entirely remove busybox from buildroot ?
    – ransh
    20 mins ago












up vote
4
down vote










up vote
4
down vote









It all depends on whether your distro uses Busybox for init.



To point you in the right direction, run ls -l /sbin/init.



If you get something like the following (example from OpenWRT):



~# ls -l /sbin/init
-rwxr-xr-x 1 root root 10824 Jan 31 2016 /sbin/init


It means init is a different application and you may be able to remove Busybox. You'll still need to replace all the command init requires with alternatives as Busybox provides many tools required for booting successfully.



However, if you get (example from Alpine Linux):



~$ ls -l /sbin/init
lrwxrwxrwx 1 root root 12 May 3 04:49 /sbin/init -> /bin/busybox


It means init is provided by Busybox and you'll not be able to boot unless you can replace Busybox's init with an alternative.



You have to consider whether you are really hardening your system by doing this as you'll end up replacing one binary with many.






share|improve this answer














It all depends on whether your distro uses Busybox for init.



To point you in the right direction, run ls -l /sbin/init.



If you get something like the following (example from OpenWRT):



~# ls -l /sbin/init
-rwxr-xr-x 1 root root 10824 Jan 31 2016 /sbin/init


It means init is a different application and you may be able to remove Busybox. You'll still need to replace all the command init requires with alternatives as Busybox provides many tools required for booting successfully.



However, if you get (example from Alpine Linux):



~$ ls -l /sbin/init
lrwxrwxrwx 1 root root 12 May 3 04:49 /sbin/init -> /bin/busybox


It means init is provided by Busybox and you'll not be able to boot unless you can replace Busybox's init with an alternative.



You have to consider whether you are really hardening your system by doing this as you'll end up replacing one binary with many.







share|improve this answer














share|improve this answer



share|improve this answer








edited 8 hours ago

























answered 9 hours ago









garethTheRed

23.4k35978




23.4k35978







  • 1




    Even if init itself isn't the one from Busybox, if a system has Busybox, it probably has other critical programs provided by Busybox, for example sh.
    – Gilles
    9 hours ago










  • @Gilles - edited and added as you commented :-)
    – garethTheRed
    9 hours ago










  • Using this solution, does buildroot provide the option to entirely remove busybox from buildroot ?
    – ransh
    20 mins ago












  • 1




    Even if init itself isn't the one from Busybox, if a system has Busybox, it probably has other critical programs provided by Busybox, for example sh.
    – Gilles
    9 hours ago










  • @Gilles - edited and added as you commented :-)
    – garethTheRed
    9 hours ago










  • Using this solution, does buildroot provide the option to entirely remove busybox from buildroot ?
    – ransh
    20 mins ago







1




1




Even if init itself isn't the one from Busybox, if a system has Busybox, it probably has other critical programs provided by Busybox, for example sh.
– Gilles
9 hours ago




Even if init itself isn't the one from Busybox, if a system has Busybox, it probably has other critical programs provided by Busybox, for example sh.
– Gilles
9 hours ago












@Gilles - edited and added as you commented :-)
– garethTheRed
9 hours ago




@Gilles - edited and added as you commented :-)
– garethTheRed
9 hours ago












Using this solution, does buildroot provide the option to entirely remove busybox from buildroot ?
– ransh
20 mins ago




Using this solution, does buildroot provide the option to entirely remove busybox from buildroot ?
– ransh
20 mins ago












up vote
3
down vote













I routinely delete busybox in my master template/Debian VMs.



As for Debian, it is a matter of not allowing it to install both the busybox and busybox-staticpackages.



You just have to keep in mind the recovery/rescue options will be more limited in a system without it. e.g. I might keep it on a physical system, I delete it as a norm form VMs to save space and under the Unix old golden rule of keeping the minimum of software installed.



At least speaking for Debian, the uninstall makes the necessary modifications in the background, and it is neither necessary to do any extra steps nor customizing anything.






share|improve this answer




















  • I forgot to mention that I use buildroot (just edit the question). So this solution may not be relevant in my case.
    – ransh
    6 hours ago














up vote
3
down vote













I routinely delete busybox in my master template/Debian VMs.



As for Debian, it is a matter of not allowing it to install both the busybox and busybox-staticpackages.



You just have to keep in mind the recovery/rescue options will be more limited in a system without it. e.g. I might keep it on a physical system, I delete it as a norm form VMs to save space and under the Unix old golden rule of keeping the minimum of software installed.



At least speaking for Debian, the uninstall makes the necessary modifications in the background, and it is neither necessary to do any extra steps nor customizing anything.






share|improve this answer




















  • I forgot to mention that I use buildroot (just edit the question). So this solution may not be relevant in my case.
    – ransh
    6 hours ago












up vote
3
down vote










up vote
3
down vote









I routinely delete busybox in my master template/Debian VMs.



As for Debian, it is a matter of not allowing it to install both the busybox and busybox-staticpackages.



You just have to keep in mind the recovery/rescue options will be more limited in a system without it. e.g. I might keep it on a physical system, I delete it as a norm form VMs to save space and under the Unix old golden rule of keeping the minimum of software installed.



At least speaking for Debian, the uninstall makes the necessary modifications in the background, and it is neither necessary to do any extra steps nor customizing anything.






share|improve this answer












I routinely delete busybox in my master template/Debian VMs.



As for Debian, it is a matter of not allowing it to install both the busybox and busybox-staticpackages.



You just have to keep in mind the recovery/rescue options will be more limited in a system without it. e.g. I might keep it on a physical system, I delete it as a norm form VMs to save space and under the Unix old golden rule of keeping the minimum of software installed.



At least speaking for Debian, the uninstall makes the necessary modifications in the background, and it is neither necessary to do any extra steps nor customizing anything.







share|improve this answer












share|improve this answer



share|improve this answer










answered 7 hours ago









Rui F Ribeiro

37.2k1274118




37.2k1274118











  • I forgot to mention that I use buildroot (just edit the question). So this solution may not be relevant in my case.
    – ransh
    6 hours ago
















  • I forgot to mention that I use buildroot (just edit the question). So this solution may not be relevant in my case.
    – ransh
    6 hours ago















I forgot to mention that I use buildroot (just edit the question). So this solution may not be relevant in my case.
– ransh
6 hours ago




I forgot to mention that I use buildroot (just edit the question). So this solution may not be relevant in my case.
– ransh
6 hours ago

















 

draft saved


draft discarded















































 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2funix.stackexchange.com%2fquestions%2f476685%2fremove-busybox-from-buildroot%23new-answer', 'question_page');

);

Post as a guest
































































Comments

Post a Comment

Popular posts from this blog

What does second last employer means? [closed]

Image
Clash Royale CLAN TAG #URR8PPP .everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty margin-bottom:0; up vote -3 down vote favorite Say, for example I have worked in the following companies, Company A => 2010 - 2011 Company B => 2011 - 2012 Company C => 2012 - Till Date Company D => Have offer Now assume Company D is asking to submit documents from my second last employer. So from the list of companies given, which company would be qualified as second last employer? software-industry employer share | improve this question asked Aug 10 '14 at 5:16 Rajaprabhu Aravindasamy 559 1 6 13 closed as off-topic by Jim G., jmort253 ♦ Aug 11 '14 at 1:58 This question appears to be off-topic. The users who voted to close gave this specific reason: "Questions seeking advice on company-specific regulations, agreements, or policies should be directed to your manager or HR department. Questions that address...
Read more

Installing NextGIS Connect into QGIS 3?

Image
Clash Royale CLAN TAG #URR8PPP .everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty margin-bottom:0; up vote 1 down vote favorite Just acquired free version of NEXTGIS and trying to install the plugin for QGIS. It tells me it was not designed for version 3 of QGIS. How do I set up the QGIS-NEXTGIS interface then? qgis qgis-plugins nextgis share | improve this question edited 3 hours ago PolyGeo ♦ 51.9k 17 77 233 asked 4 hours ago IanGS 16 4 New contributor IanGS is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct. add a comment  |  up vote 1 down vote favorite Just acquired free version of NEXTGIS and trying to install the plugin for QGIS. It tells me it was not designed for version 3 of QGIS. How do I set up the QGIS-NEXTGIS interface then? qgis qgis-plugin...
Read more

One-line joke

A one-liner is a joke that is delivered in a single line. A good one-liner is said to be pithy - concise and meaningful. [1] Comedians and actors use this comedic method as part of their act, e.g. Jimmy Carr, Tommy Cooper, Rodney Dangerfield, Norm Macdonald, Ken Dodd, Stewart Francis, Zach Galifianakis, Mitch Hedberg, Anthony Jeselnik, Milton Jones, Shappi Khorsandi, Jay London, Mark Linn-Baker, Demetri Martin, Groucho Marx, Dan Mintz, Emo Philips, Tim Vine, Steven Wright and Henny Youngman and Arnold Schwarzenegger. [ citation needed ] Many fictional characters are also known to deliver one-liners, including James Bond, who usually includes pithy and laconic quips after disposing of a villain. [ citation needed ] Examples "A baby seal walks into a club." "A dyslexic man walks into a bra." (Anonymous) "There are three types of people, those who can count and those who can't." "Venison's dear, isn't it?" (Jimmy Carr) "An escala...
Read more