Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > linux.kernel > #1625357

Re: [PATCH 1/4] added SECURITY_TIOCSTI_RESTRICT kernel config

From Alan Cox <gnomes@lxorguk.ukuu.org.uk>
Newsgroups linux.kernel
Subject Re: [PATCH 1/4] added SECURITY_TIOCSTI_RESTRICT kernel config
Date 2017-04-18 16:30 +0200
Message-ID <txCiK-7dQ-11@gated-at.bofh.it> (permalink)
References <tx81j-5DY-7@gated-at.bofh.it> <tx81k-5DY-31@gated-at.bofh.it> <tx8NI-5UK-5@gated-at.bofh.it>
Organization Intel Corporation

Show all headers | View raw


> Since tty sessions are usually separated by different users, how would
> they have the same one and yet need something like this?
> 
> Also, why not put this in the tty config section?

The normal attack use case people argue about is a rogue process on the
users machine sitting there waiting until the user has logged in to a
remote machine and is idle and then doing stuff.

Attackers of course don't bother doing that because it's easier to get
the user to run a different ssh client instead.

Alan

Back to linux.kernel | Previous | NextPrevious in thread | Next in thread | Find similar | Unroll thread


Thread

[PATCH 1/4] added SECURITY_TIOCSTI_RESTRICT kernel config Matt Brown <matt@nmatt.com> - 2017-04-17 08:10 +0200
  Re: [PATCH 1/4] added SECURITY_TIOCSTI_RESTRICT kernel config Greg KH <gregkh@linuxfoundation.org> - 2017-04-17 09:00 +0200
    Re: [PATCH 1/4] added SECURITY_TIOCSTI_RESTRICT kernel config Matt Brown <matt@nmatt.com> - 2017-04-18 06:40 +0200
    Re: [PATCH 1/4] added SECURITY_TIOCSTI_RESTRICT kernel config Alan Cox <gnomes@lxorguk.ukuu.org.uk> - 2017-04-18 16:30 +0200
      Re: [kernel-hardening] Re: [PATCH 1/4] added SECURITY_TIOCSTI_RESTRICT  kernel config Kees Cook <keescook@chromium.org> - 2017-04-18 17:50 +0200

csiph-web