Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 25 Apr 2017 14:47:46 +0100
From: Alan Cox <>
To: Matt Brown <>
Subject: Re: [PATCH v5 0/2] security: tty: make TIOCSTI ioctl require

> There could be a few user programs that would be effected by this
> change.
> See: <*TIOCSTI>
> notable programs are: agetty, csh, xemacs and tcsh
> However, I still believe that this change is worth it given that the
> Kconfig defaults to n. This will be a feature that is turned on for the
> same reason that people activate it when using grsecurity. Users of this
> opt-in feature will realize that they are choosing security over some OS
> features 

Only in this case they are not.

If I am at the point I have the ability to send you TIOCSTI you already
lost because I can just open /dev/tty to get access to my controlling tty
and use write().


Powered by blists - more mailing lists

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.