Re: The Hamm Bugs Stamp-Out List for 1998-06-08
On Mon, 8 Jun 1998, Joel Klecker wrote:
> At 18:29 -0700 1998-06-08, Richard Braakman wrote:
> >Package: login
> >Maintainer: Guy Maor <maor@debian.org>
> > 22191 login: does not chown /dev/vcs* anymore
>
> As I quoted in a reply to 22191:
>
> Here's what the author says in libmisc/chowntty.c:
>
> #ifdef __linux__
> /*
> * Please don't add code to chown /dev/vcs* to the user logging in -
> * it's a potential security hole. I wouldn't like the previous user
> * to hold the file descriptor open and watch my screen. We don't
> * have the *BSD revoke() system call yet, and vhangup() only works
> * for tty devices (which vcs* is not). --marekm
> */
> #endif
> }
Apart from this, I thought that using /dev/vcs* at all is depricated and
that the use of /dev/tty* is preferred instead. Am I right or are there
still situations where using a /dev/vcs* device is preferred above using a
/dev/tty* device?
Remco
--
To UNSUBSCRIBE, email to debian-devel-request@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org
Reply to: