Subject: re: CVS commit: src/lib/libutil
To: matthew green <mrg@eterna.com.au>
From: Christos Zoulas <christos@zoulas.com>
List: source-changes
Date: 06/17/2004 23:32:55
On Jun 18, 1:17pm, mrg@eterna.com.au (matthew green) wrote:
-- Subject: re: CVS commit: src/lib/libutil
|
| Modified Files:
| src/lib/libutil: openpty.3 pty.c
|
| Log Message:
| Don't allow openpty to succeed if the caller is non-superuser.
|
|
| i'm not sure this is the right thing to do. why make this change?
It is a security issue, isn't it to have a pty that others can read/write to?
Oh, and I am trying to figure out how to make ptm mandatory, but how do
you do this without putting pseudo-device ptm in sys/conf/files? And then
how can you avoid having it if you don't want to?
christos