BSD tty security, part 4: What You Can Look Forward To

[Ian Crocker]

In article <438 at pharaoh.UUCP>, ian at pharaoh.UUCP (Ian Crocker) writes:
> 
> write permission on.  However when you try and do the TIOCSTI it fails on
> all the systems I have tried it on because you are not the owner of the
> device. I know that the manual says it should work as you are trying
> to do the ioctl on your control terminal, but this is not the case on my
> systems - you have to own the device or have an euid of 0.
> 

Further to my previous post I thought of a machine I hadn't tried it on and 
sure enough it worked.  Complete control of the root terminal from an
unprivileged userid.  Seems this manufacturer is lagging behind the others -
no prizes for guessing who it is!

Ian.


-- 
Ian Crocker
NPW-mail : ian at pharaoh
usenet   : ian at cyborg.bt.co.uk