How about allowing /dev/console output redirection
by any process running with its current tty set to
either /dev/console or /dev/kd (or /dev/wscons)?

matthew green writes:
 > 
 > 
 > the problem here is that there is no clean way to find out
 > the owner of /dev/console from within the kernel.  ideally
 > TIOCCONS should be limited to root and this user.  this is
 > something i tried to solve about 5 years ago but failed.
 > 
 > (perhaps it should also be based on the permissions of
 > /dev/console -- world writable, and anyone can have it).