Re: suid xterm
Herbert Xu <herbert@gondor.apana.org.au> writes:
> In article <[🔎] 19980329231357.62680@beijing.itri.loyola.edu> you wrote:
> > Quick question: has there been a discussion of whether a setuid xterm is
> > a good idea? Is utmp logging worth the perennial xterm security holes?
>
> Yes unless you're willing to let other people see what you type and what is
> displayed on your screen (oops, there goes my credit card number...)
Right. Programs like xterm and rxvt are suid so they can chown your
pseudo tty, not so they can write to utmp.
Guy
--
To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: