2001-07-03 01:16:51

by Dan Podeanu

[permalink] [raw]
Subject: Re: PATCH: drivers/char/vt.c allows virtually locking up nonnetworked machine

On Sat, 30 Jun 2001, Rudolf Polzer wrote:

> There is a problem concerning chvt. A normal user can run a
>
> bash$ while [ 1 ]; do chvt 11; done
>
> which cannot be killed using the console (only remotely, virtually never
> on a nonnetworked multiuser machine). So I changed the kernel source code
> so that only the superuser may change terminals.
Ok, lemme see if I got this right. What exactly do you mean by 'a normal
user' or a 'nonnetworked machine'. If the machine is non-networked, then
it must be sort of single user. Oh yea, and if someone logs on from your
console, smack them and don't patch the kernel.

Oh yeah, I can imagine a few situations in which this would be necessary.
But if someone you don't trust logs on from your (non-networked) console
and has time to play with it, you're screwed anyway.

Dan.