Subject: re: CVS commit: src/lib/libutil
To: matthew green <mrg@eterna.com.au>
From: Christos Zoulas <christos@zoulas.com>
List: source-changes
Date: 06/17/2004 23:32:55
On Jun 18,  1:17pm, mrg@eterna.com.au (matthew green) wrote:
-- Subject: re: CVS commit: src/lib/libutil

|    
|    Modified Files:
|    	src/lib/libutil: openpty.3 pty.c
|    
|    Log Message:
|    Don't allow openpty to succeed if the caller is non-superuser.
| 
| 
| i'm not sure this is the right thing to do.  why make this change?

It is a security issue, isn't it to have a pty that others can read/write to?
Oh, and I am trying to figure out how to make ptm mandatory, but how do
you do this without putting pseudo-device ptm in sys/conf/files? And then
how can you avoid having it if you don't want to?

christos