Bug#334113: kernel allows loadkeys to be used by any user, allowing for local root compromise

2005-10-20 Thread Krzysztof Halasa
lem with > old KVM > switches). Must have been a different problem, just tried and the keyboard works fine. But of course one can connect the "dongle" before rebooting. Dead keyboard can force reboot as well, can't it? > Of course, with USB keyboards this approach would work. W

Bug#334113: kernel allows loadkeys to be used by any user, allowing for local root compromise

2005-10-19 Thread Krzysztof Halasa
"dongle" can send data from the keyboard to a notebook. With luck two wires would do (using parallel port for sampling data). Anyway I wouldn't count on people's reaction when they see someone doing something unusual. -- Krzysztof Halasa -- To UNSUBSCRIBE, email to [

Bug#334113: kernel allows loadkeys to be used by any user, allowing for local root compromise

2005-10-19 Thread Krzysztof Halasa
nate gracefully. But it would require changes to kernel SAK handling I think - not sure if it's worth it, given other threats. Another idea: if the machines are ACPI-enabled and have "soft-power" buttons, one can make use of acpid. -- Krzysztof Halasa -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#334113: kernel allows loadkeys to be used by any user, allowing for local root compromise

2005-10-19 Thread Krzysztof Halasa
ap > Ctrl-Alt-Backspace. So it would be good if the SAK also worked there which > would require it to set a "sane" video mode. I assume that one can notice that Ctrl-Alt-Backspace doesn't work, and stop there. I think SAK/X11 video mode issue is possible to fix, though. -- Kr

Bug#334113: [Secure-testing-team] Re: kernel allows loadkeys to be used by any user, allowing for local root compromise

2005-10-19 Thread Krzysztof Halasa
r switching VTs? I would investigate switchvt (or how is it named) too. -- Krzysztof Halasa -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#334113: kernel allows loadkeys to be used by any user, allowing for local root compromise

2005-10-18 Thread Krzysztof Halasa
to a machine with user accounts. Not a kernel thing, though - Linux has termios locking for 10+ yrs. -- Krzysztof Halasa -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Bug#334113: kernel allows loadkeys to be used by any user, allowing for local root compromise

2005-10-18 Thread Krzysztof Halasa
e sequences can redefine key bindings as well. That's why SAK/reset is so important. -- Krzysztof Halasa -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]