From: plinius@comcast.net
To: linux-kernel@vger.kernel.org
Subject: security patch for drivers/char/n_tty.c
Date: Sat, 25 Sep 2004 21:49:27 +0000
Message-Id: <092520042149.27494.4155E7E70004FE9800006B6622007456729C9A070207049F@comcast.net>
Sender: linux-kernel-owner@vger.kernel.org
Content-Length: 908
Lines: 34

Hello,

Recently while examining the Linux tty code I noticed that my
root password was still in read_buf some time after logging in,
long after it was "read".

I thought it might be a good idea to add a fix to clear out 
characters after they're read. The patch seems to work all right.

This is for kernel 2.6.8.1 and the file is drivers/char/n_tty.c.

Enjoy,
Z Smith

Inline patch:

30a31,33
>  *
>  * 2004/09/20	by Z Smith (plinius@comcast.net): chars now truly erased upon
>  *		reading from read_buf for better security.
380a384
> 			tty->read_buf[head] = 0;
420a425
> 					tty->read_buf[tail] = 0;
1108a1114
> 				tty->read_buf[tty->read_tail] = 0;

-end-

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/