At 18:29 -0700 1998-06-08, Richard Braakman wrote:
>Package: login
>Maintainer: Guy Maor <[EMAIL PROTECTED]>
> 22191 login: does not chown /dev/vcs* anymore
As I quoted in a reply to 22191:
Here's what the author says in libmisc/chowntty.c:
#ifdef __linux__
/*
* Please don't add code to chown /dev/vcs* to the user logging in -
* it's a potential security hole. I wouldn't like the previous user
* to hold the file descriptor open and watch my screen. We don't
* have the *BSD revoke() system call yet, and vhangup() only works
* for tty devices (which vcs* is not). --marekm
*/
#endif
}
--
Joel "Espy" Klecker
Debian GNU/Linux Developer
<mailto:[EMAIL PROTECTED]>
<http://web.espy.org/>
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]