Bug 23446

Summary:	login chmods terminal to mode 0622 during authentication
Product:	[Retired] Red Hat Linux	Reporter:	Jarno Huuskonen <jarno.huuskonen>
Component:	util-linux	Assignee:	Erik Troan <ewt>
Status:	CLOSED CURRENTRELEASE	QA Contact:	David Lawrence <dkl>
Severity:	medium	Docs Contact:
Priority:	medium
Version:	6.2	CC:	abartlet, chris, dr
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2001-04-17 16:07:26 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:

Description Jarno Huuskonen 2001-01-05 22:03:27 UTC

util-linux login sets the terminal to mode 0622 while authenticating the
user. At least during the authentication anybody can write to the terminal
and at least mess up the terminal settings. 

Also Solar Designer pointed out that if the login chown/chmod calls fail
the user is left with unsecure terminal.

Comment 1 Erik Troan 2001-04-17 16:07:22 UTC

This is fine in seawolf.