Hello, > gpm uses one clip-board space for all users (including root). So if > any of them marks anything sensitive, a following user can gather this > information.
gpm does not implement the paste functionality, it's all handled in the kernel. gpm only calls ioctl(TIOCLINUX) to set the selection (by only giving the coordinates!), and make the kernel paste. Not allowing cross-user copy/paste would be a big regression. I use it quite often for instance. Systematically clearing the selection on log-out could be unconvenient too. Clearing the selection when nobody is logged any more, however, should be fine. As long as a user is logged in, if somebody else comes over the keyboard he'll be able to do other nasty things anyway. I believe that can be implemented in consolekit, it merely needs to do the ioctl on last logout. There is no need for gpm patch anyway, it's all in the kernel. Samuel -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
