| From | Sent On | Attachments |
|---|---|---|
| Kay Sievers | Nov 16, 2010 7:46 am | |
| Alan Cox | Nov 16, 2010 7:56 am | |
| Kay Sievers | Nov 16, 2010 8:12 am | |
| Alan Cox | Nov 16, 2010 9:14 am | |
| Kay Sievers | Nov 16, 2010 10:51 am | |
| Alan Cox | Nov 16, 2010 11:55 am | |
| Kay Sievers | Nov 16, 2010 12:15 pm | |
| Alan Cox | Nov 16, 2010 12:48 pm | |
| Kay Sievers | Nov 16, 2010 1:28 pm | |
| Lennart Poettering | Nov 16, 2010 1:35 pm | |
| Lennart Poettering | Nov 16, 2010 1:42 pm | |
| Alan Cox | Nov 16, 2010 2:51 pm | |
| Alan Cox | Nov 16, 2010 2:55 pm | |
| Lennart Poettering | Nov 16, 2010 2:58 pm | |
| Alan Cox | Nov 16, 2010 3:04 pm | |
| Lennart Poettering | Nov 16, 2010 3:10 pm | |
| Lennart Poettering | Nov 16, 2010 3:18 pm | |
| Alan Cox | Nov 16, 2010 3:45 pm | |
| Etched Pixels | Nov 16, 2010 3:49 pm | |
| John Stoffel | Nov 17, 2010 8:31 am | |
| Vald...@vt.edu | Nov 17, 2010 2:00 pm | |
| Kay Sievers | Nov 17, 2010 3:39 pm | |
| Alan Cox | Nov 17, 2010 3:56 pm | |
| Greg KH | Nov 17, 2010 5:27 pm | |
| Lennart Poettering | Nov 17, 2010 5:48 pm | |
| Greg KH | Nov 17, 2010 5:52 pm | |
| Lennart Poettering | Nov 17, 2010 6:28 pm | |
| Alan Cox | Nov 18, 2010 2:14 am | |
| Dr. Werner Fink | Nov 18, 2010 2:59 am | |
| Alan Cox | Nov 18, 2010 3:23 am | |
| Kay Sievers | Nov 18, 2010 3:54 am | |
| Kay Sievers | Nov 18, 2010 4:03 am | |
| Dr. Werner Fink | Nov 18, 2010 4:12 am | |
| Alan Cox | Nov 18, 2010 4:57 am | |
| Alan Cox | Nov 18, 2010 5:00 am | |
| Dr. Werner Fink | Nov 18, 2010 5:13 am | |
| Alan Cox | Nov 18, 2010 6:41 am | |
| Dr. Werner Fink | Nov 19, 2010 5:21 am | |
| Alan Cox | Nov 19, 2010 7:46 am | |
| Dr. Werner Fink | Nov 19, 2010 9:06 am | .tiocgdev |
| Greg KH | Nov 19, 2010 10:02 am | |
| Dr. Werner Fink | Nov 19, 2010 10:41 am | |
| Alan Cox | Nov 20, 2010 4:39 am | |
| Dr. Werner Fink | Dec 1, 2010 3:15 am | |
| Dr. Werner Fink | Dec 1, 2010 4:31 am | .tiocgdev |
| Dr. Werner Fink | Dec 3, 2010 3:47 am | .Other |
| Subject: | Re: tty: add 'active' sysfs attribute to tty0 and console device | |
|---|---|---|
| From: | Etched Pixels (sal...@etchedpixels.co.uk) | |
| Date: | Nov 16, 2010 3:49:27 pm | |
| List: | org.kernel.vger.linux-kernel | |
How would that work? Not giving a user ownership of the tty device? That would break like about every second program. It's too late for this.
Actually almost nothing in the OS cares about what another user is doing, and you can have per mount /dev - a la Plan 9.
And anyway unless the kernel is patched you can even see who is running which process on the system. And now you become all nervous about telling people which tty is currently in the fg? Seriously?
procfs, to users.. not in that kind of environment !
Security is a fog granade here. It's a non-issue.
Also, afaics the current ioctl() interface you love so much works on any tty and gives you that information anyway, right? Some tty fd should be
I'm not particularly attached to the ioctl interface, and I'm not disagreeing with you that it needs redoing to actually be useful for what you want and for a lot of other cases. The question is what the resulting interface should look like so its useful for more than just your specific current pseudo-secure bits.
accessible by about every process and VT_GETSTATE on that and you have the same information -- and no further perm checking is done at all!
You need to have access to a console fd, which in that case is normally fine, but it is a weakness and one reason I know about that is because it has been complained about !
And as you say setting it to 0600 fixes that aspect. I've no problem with that either as SELinux rules can manage it effectively.
Alan
-- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majo...@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/






.tiocgdev