Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 28 Apr 1997 10:00:51 +0400 (MSD)
From:      Igor Vinokurov <igor@cs.ibank.ru>
To:        hackers@freebsd.org
Subject:   Re: console [on|off] (fwd)
Message-ID:  <199704280600.KAA12193@escape.cs.ibank.ru>

next in thread | raw e-mail | index | archive | help

--ELM862207250-12134-0_
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

re,

Anybody can explain this problem? I use screen from ordinary user
and can grab console even if no read permission to /dev/console

-- 
Igor Vinokurov, JSB Inkombank

--ELM862207250-12134-0_
Content-Type: message/rfc822
Content-Disposition: inline
Content-Description: Forwarded message from Michael Schroeder
Content-Transfer-Encoding: 7bit

Return-Path: <mlschroe@faui40.informatik.uni-erlangen.de>
Received: from faui40.informatik.uni-erlangen.de (mlschroe@faui40.informatik.uni-erlangen.de [131.188.2.40]) by escape.cs.ibank.ru (8.8.3/8.8.3/Zynaps) with ESMTP id AAA08904 for <igor@cs.ibank.ru>; Mon, 28 Apr 1997 00:01:50 +0400 (MSD)
Received: (from mlschroe@localhost) 
	by faui40.informatik.uni-erlangen.de (8.8.5/8.0.5-FAU) id WAA11198; Sun, 27 Apr 1997 22:01:11 +0200 (MET DST)
From: Michael Schroeder <Michael.Schroeder@informatik.uni-erlangen.de>
Message-Id: <199704272001.WAA11198@faui40.informatik.uni-erlangen.de>
Subject: Re: console [on|off]
To: igor@cs.ibank.ru (Igor Vinokurov)
Date: Sun, 27 Apr 1997 22:01:11 +0200 (MET DST)
Cc: Juergen.Weigert@informatik.uni-erlangen.de (Juergen Weigert)
In-Reply-To: <199704191536.TAA29579@escape.cs.ibank.ru> from "Igor Vinokurov" at Apr 19, 97 07:36:35 pm
X-Mailer: ELM [version 2.4 PL24]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit

> re,
> 
> jfyi, by "console on" command ordinary users may grab console
> even if no have read permission for /dev/console...
> 
> Ugly, no?

No. The TIOCCONS ioctl is done with the uid of the user. Anybody
can compile a program that does the ioctl. If your OS allows the
ioctl even if the user does not own /dev/console or has read
permissions, it's the fault of the OS.

Michael.

---------------------------------------------------------------
Michael Schroeder     mlschroe@immd4.informatik.uni-erlangen.de
main(_){while(_=~getchar())putchar(~_-1/(~(_|32)/13*2-11)*13);}


--ELM862207250-12134-0_--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199704280600.KAA12193>