[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Message-ID: <CAJzxamK7STS-ydt5PWvLW1bYj5gwwGNgMopkoTY3DP0knzE3ug@mail.gmail.com>
Date: Wed, 7 Nov 2012 00:37:25 +1100
From: David Black <disclosure@....org>
To: oss-security <oss-security@...ts.openwall.com>
Subject: Re: TTY handling when executing code in different lower-privileged
context (su, virt containers)
>In both cases, paranoid administrators might decide to use /dev/null
>as stdin/stdout/stderr when just starting non-interactive programs in
>different context, while they could replace the privileged shell with
>exec when interactive context switch is needed (no shell, no escalation).
>
>Any opinions on that?
>
Perhaps if sudo/su determine if a user is running 'interactively' they
could use a pseudo-pty ?
Powered by blists - more mailing lists
Please check out the
Open Source Software Security Wiki, which is counterpart to this
mailing list.
Confused about mailing lists and their use?
Read about mailing lists on Wikipedia
and check out these
guidelines on proper formatting of your messages.
