Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.debian.kernel > #86374

Bug#1099697: initramfs-tools: please change default /dev/pts mode to 0600

Path csiph.com!fu-berlin.de!bofh.it!news.nic.it!robomod
From Chris Hofstaedtler <zeha@debian.org>
Newsgroups linux.debian.bugs.dist, linux.debian.kernel
Subject Bug#1099697: initramfs-tools: please change default /dev/pts mode to 0600
Date Fri, 07 Mar 2025 08:10:01 +0100
Message-ID <KnA0h-4eZI-1@gated-at.bofh.it> (permalink)
References <Knrq1-48Px-1@gated-at.bofh.it> <Knrq1-48Px-1@gated-at.bofh.it>
X-Mailbox-Line From debian-bugs-dist-request@lists.debian.org Fri Mar 7 07:09:08 2025
Old-Return-Path <debbugs@buxtehude.debian.org>
X-Spam-Flag NO
X-Spam-Score -3.999
Reply-To Chris Hofstaedtler <zeha@debian.org>, 1099697@bugs.debian.org
Resent-To debian-bugs-dist@lists.debian.org
Resent-Cc Debian kernel team <debian-kernel@lists.debian.org>
X-Debian-Pr-Message followup 1099697
X-Debian-Pr-Package initramfs-tools
X-Debian-Pr-Source initramfs-tools
MIME-Version 1.0
Content-Type text/plain; charset=utf-8
Content-Disposition inline
X-Debian-User zeha
X-Debian-Message from BTS
X-Mailing-List <debian-bugs-dist@lists.debian.org> archive/latest/1891476
List-ID <debian-bugs-dist.lists.debian.org>
List-URL <https://lists.debian.org/debian-bugs-dist/>
Approved robomod@news.nic.it
Lines 17
Organization linux.* mail to news gateway
Sender robomod@news.nic.it
X-Original-Date Fri, 7 Mar 2025 08:08:00 +0100
X-Original-Message-ID <Z8qbUFptujFW9PJ3@per.namespace.at>
X-Original-References <Z8oXqcvhtbqv_oZ0@per.namespace.at> <Z8oXqcvhtbqv_oZ0@per.namespace.at>
Xref csiph.com linux.debian.bugs.dist:1236515 linux.debian.kernel:86374

Cross-posted to 2 groups.

Show key headers only | View raw


On Thu, Mar 06, 2025 at 10:46:17PM +0100, Chris Hofstaedtler wrote:
> in the past there were security concerns (and security issues 
> raised) around other users writing to each others terminals. Some of 
> this was workarounded in util-linux, cf. CVE-2024-28085.
> 
> A fuller fix is to disallow writing unrelated users to each other's 
> terminals by default.
[..]
> Please find a patch attached
> following the change from 0620 to 0600 for initramfs-tools.
[..]

Salsa merge request:
https://salsa.debian.org/kernel-team/initramfs-tools/-/merge_requests/161

Best,
Chris

Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread


Thread

Bug#1099697: initramfs-tools: please change default /dev/pts mode to 0600 Chris Hofstaedtler <zeha@debian.org> - 2025-03-06 23:00 +0100
  Bug#1099697: initramfs-tools: please change default /dev/pts mode to 0600 Chris Hofstaedtler <zeha@debian.org> - 2025-03-07 08:10 +0100
  Bug#1099697: initramfs-tools: please change default /dev/pts mode to 0600 cacin@allfreemail.net - 2025-03-07 08:40 +0100
  Bug#1099697: marked as done (initramfs-tools: please change  default /dev/pts mode to 0600) "Debian Bug Tracking System" <owner@bugs.debian.org> - 2025-03-28 05:40 +0100

csiph-web