Return-Path: Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S964789AbVJSLAr (ORCPT ); Wed, 19 Oct 2005 07:00:47 -0400 Received: (majordomo@vger.kernel.org) by vger.kernel.org id S964790AbVJSLAr (ORCPT ); Wed, 19 Oct 2005 07:00:47 -0400 Received: from khc.piap.pl ([195.187.100.11]:29444 "EHLO khc.piap.pl") by vger.kernel.org with ESMTP id S964789AbVJSLAr (ORCPT ); Wed, 19 Oct 2005 07:00:47 -0400 To: Anthony DeRobertis Cc: unlisted-recipients:"; (no To-header on input) Horms" , security@kernel.org, team@security.debian.org, 334113@bugs.debian.org, linux-kernel@vger.kernel.org, Rudolf Polzer , Alastair McKinstry , secure-testing-team@lists.alioth.debian.org Illegal-Object: Syntax error in Cc: address found on vger.kernel.org: Cc: unlisted-recipients:; (no To-header on input)Horms ^-missing end of address Illegal-Object: Syntax error in Cc: address found on vger.kernel.org: Cc: unlisted-recipients:; (no To-header on input)Horms ^-missing end of address Subject: Re: [Secure-testing-team] Re: kernel allows loadkeys to be used by any user, allowing for local root compromise References: <20051018044146.GF23462@verge.net.au> <4355C812.80103@derobert.net> From: Krzysztof Halasa Date: Wed, 19 Oct 2005 13:00:45 +0200 In-Reply-To: <4355C812.80103@derobert.net> (Anthony DeRobertis's message of "Wed, 19 Oct 2005 00:14:10 -0400") Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Sender: linux-kernel-owner@vger.kernel.org X-Mailing-List: linux-kernel@vger.kernel.org Content-Length: 623 Lines: 15 Anthony DeRobertis writes: > Well, you can configure a single vty to only allow logins from admins. > Then you avoid the fake login problem, but not the loadkeys problem > (since that affects all vtys) Just a guess... Can you use loadkeys to change keys used for switching VTs? I would investigate switchvt (or how is it named) too. -- Krzysztof Halasa - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/