Lucene search
K

midnight-commander-tty.txt

🗓️ 17 Aug 1999 00:00:00Reported by Packet StormType 
packetstorm
 packetstorm
🔗 packetstormsecurity.com👁 34 Views

Kernel tty allocation issue affects non-suid programs in Linux, suggests potential solutions.

Code
`Date: Sun, 6 Sep 1998 00:53:24 +0200  
From: Michal Zalewski <[email protected]>  
To: [email protected]  
Subject: Sendmail, lynx, Netscape, sshd, Linux kernel (twice)  
  
More kernel 'things' - tty allocation  
-------------------------------------  
  
Hmm, I've posted it months ago, and I have no idea why it hasn't been  
approved. Hmm, the problem: run 'mc' and enter: "ls -l `tty`". Not  
much to say. Default Linux semantics won't allow non-suid programs to  
allocate tty properly (it could be allocated, but in world-writable and  
world-readable mode). Two solutions:  
  
1. Give +s to Midnight Commander and other programs ;>  
2. Remove +s from screen, xterm, rxvt, mc ;> and use this module instead:  
http://dione.ids.pl/~lcamtuf/pliki/ttyperm.c (*Solution*)  
  
It changes Linux semantics on tty allocation to make it SYSV-alike. From  
now, you could even use non-suid screen - export SCREENDIR=~/screens in  
login scripts should be sufficient.  
  
_______________________________________________________________________  
Michal Zalewski [[email protected]] [ENSI / marchew] [dione.ids.pl SYSADM]  
[http://linux.lepszy.od.kobiety.pl/~lcamtuf/] <=--=> bash$ :(){ :|:&};:  
[voice phone: +48 (0) 22 813 25 86] ? [pager (MetroBip): 0 642 222 813]  
Iterowac jest rzecza ludzka, wykonywac rekursywnie - boska [P. Deutsch]  
`

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Aug 1999 00:00Current
7.4High risk
Vulners AI Score7.4
34