At 18:29 -0700 1998-06-08, Richard Braakman wrote:
>Package: login
>Maintainer: Guy Maor <[EMAIL PROTECTED]>
>  22191  login: does not chown /dev/vcs* anymore

As I quoted in a reply to 22191:

Here's what the author says in libmisc/chowntty.c:

#ifdef __linux__
        /*
         * Please don't add code to chown /dev/vcs* to the user logging in -
         * it's a potential security hole.  I wouldn't like the previous user
         * to hold the file descriptor open and watch my screen.  We don't
         * have the *BSD revoke() system call yet, and vhangup() only works
         * for tty devices (which vcs* is not).  --marekm
         */
#endif
}
--
Joel "Espy" Klecker
Debian GNU/Linux Developer
<mailto:[EMAIL PROTECTED]>
<http://web.espy.org/>


--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to