From: Guest section DW <dwguest@win.tue.nl>
To: Rudolf Polzer <rpolzer@durchnull.de>, torvalds@transmeta.com
Cc: linux-kernel@vger.kernel.org
Subject: Re: PATCH: drivers/char/vt.c allows virtually locking up nonnetworked machine
Date: Sun, 1 Jul 2001 00:53:34 +0200 [thread overview]
Message-ID: <20010701005334.A26841@win.tue.nl> (raw)
In-Reply-To: <20010630231040.A3501@www42.durchnull.de>
In-Reply-To: <20010630231040.A3501@www42.durchnull.de>; from Rudolf Polzer on Sat, Jun 30, 2001 at 11:10:40PM +0200
On Sat, Jun 30, 2001 at 11:10:40PM +0200, Rudolf Polzer wrote:
> There is a problem concerning chvt. A normal user can run a
>
> bash$ while [ 1 ]; do chvt 11; done
>
> which cannot be killed using the console (only remotely, virtually never
> on a nonnetworked multiuser machine). So I changed the kernel source code
> so that only the superuser may change terminals.
The person at the console on a nonnetworked machine
can make life difficult for himself in a great variety of ways.
(E.g., try running
#include <signal.h>
main(){int i;for(i=1; i<32; i++)signal(i,SIG_IGN); while(1);}
on all VTs.)
It would not increase security when root privileges were needed
in all such cases.
Andries
next prev parent reply other threads:[~2001-06-30 22:53 UTC|newest]
Thread overview: 3+ messages / expand[flat|nested] mbox.gz Atom feed top
2001-06-30 21:10 Rudolf Polzer
2001-06-30 22:53 ` Guest section DW [this message]
2001-06-30 22:54 ` Dan Podeanu
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=20010701005334.A26841@win.tue.nl \
--to=dwguest@win.tue.nl \
--cc=linux-kernel@vger.kernel.org \
--cc=rpolzer@durchnull.de \
--cc=torvalds@transmeta.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox
all inboxes | Powered by JetHome®