oss-sec mailing list archives

Re: TTY pushback vulnerabilities / TIOCSTI

From: Dave Horsfall <dave () horsfall org>
Date: Wed, 15 Mar 2023 20:03:11 +1100 (EST)

On Wed, 15 Mar 2023, Fabian Keil wrote:

In ElectroBSD I removed TIOCSTI support in 2017 [0] and haven't noticed 
any problems.


I hate tossing out functionality; would you not make it a privileged 
operation instead?

-- Dave

Current thread:

Re: TTY pushback vulnerabilities / TIOCSTI, (continued)
- - - Re: TTY pushback vulnerabilities / TIOCSTI Jakub Wilk (Mar 21)
    - Re: TTY pushback vulnerabilities / TIOCSTI Hanno Böck (Mar 24)
    - Re: TTY pushback vulnerabilities / TIOCSTI Lyndon Nerenberg (VE7TFX/VE6BBM) (Mar 18)
    - Re: TTY pushback vulnerabilities / TIOCSTI Christos Zoulas (Mar 18)
    - Re: TTY pushback vulnerabilities / TIOCSTI Eric Ashley (Mar 18)
- Re: TTY pushback vulnerabilities / TIOCSTI Peter Bex (Mar 14)
  - Re: TTY pushback vulnerabilities / TIOCSTI Hanno Böck (Mar 14)
    - Re: TTY pushback vulnerabilities / TIOCSTI Peter Bex (Mar 14)
- Re: TTY pushback vulnerabilities / TIOCSTI Shawn Webb (Mar 14)
  - Re: TTY pushback vulnerabilities / TIOCSTI Fabian Keil (Mar 15)
    - Re: TTY pushback vulnerabilities / TIOCSTI Dave Horsfall (Mar 15)
    - Re: TTY pushback vulnerabilities / TIOCSTI Casper Dik (Mar 15)
    - Re: TTY pushback vulnerabilities / TIOCSTI Hanno Böck (Mar 15)
    - Re: TTY pushback vulnerabilities / TIOCSTI Jan Engelhardt (Mar 15)
    - Re: TTY pushback vulnerabilities / TIOCSTI Ed Maste (Mar 17)