Bug 10769

Summary:	pam_console does not revoke access to devices on logout
Product:	[Retired] Red Hat Linux	Reporter:	lav
Component:	kernel	Assignee:	Arjan van de Ven <arjanv>
Status:	CLOSED CURRENTRELEASE	QA Contact:	Brian Brock <bbrock>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6.2	CC:	bressers, k.georgiou
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2004-09-30 15:38:47 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description lav 2000-04-12 22:24:49 UTC

when a user logs on console, he's given with access to some devices,
like dsp, vcs* or cdrom. If he leaves processes which has opened these
devices and logs out, the processes still have access to the opened
devices. This can be misused by malicious users. Example:
   (while :;do echo -n X;sleep 1;done)>/dev/vcs1& logout

Proper solution may require modifications to linux kernel, something like
vhangup for any device: stopio from sco unix or revoke.

Comment 1 Cristian Gafton 2000-05-22 15:37:59 UTC

assigned to nalin

Comment 2 Alan Cox 2002-12-14 22:39:47 UTC

While this bug seemed irrelevant the non tty case has at least one interesting
abuse we should look at resolving. Moved to kernel where we need to do some of
the work.

Comment 4 Bugzilla owner 2004-09-30 15:38:47 UTC

Thanks for the bug report. However, Red Hat no longer maintains this version of
the product. Please upgrade to the latest version and open a new bug if the problem
persists.

The Fedora Legacy project (http://fedoralegacy.org/) maintains some older releases, 
and if you believe this bug is interesting to them, please report the problem in
the bug tracker at: http://bugzilla.fedora.us/