Bug 10769 - pam_console does not revoke access to devices on logout
Summary: pam_console does not revoke access to devices on logout
Alias: None
Product: Red Hat Linux
Classification: Retired
Component: kernel   
(Show other bugs)
Version: 6.2
Hardware: All Linux
Target Milestone: ---
Assignee: Arjan van de Ven
QA Contact: Brian Brock
Keywords: Security
Depends On:
TreeView+ depends on / blocked
Reported: 2000-04-12 22:24 UTC by lav
Modified: 2008-08-01 16:22 UTC (History)
2 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2004-09-30 15:38:47 UTC
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

Description lav 2000-04-12 22:24:49 UTC
when a user logs on console, he's given with access to some devices,
like dsp, vcs* or cdrom. If he leaves processes which has opened these
devices and logs out, the processes still have access to the opened
devices. This can be misused by malicious users. Example:
   (while :;do echo -n X;sleep 1;done)>/dev/vcs1& logout

Proper solution may require modifications to linux kernel, something like
vhangup for any device: stopio from sco unix or revoke.

Comment 1 Cristian Gafton 2000-05-22 15:37:59 UTC
assigned to nalin

Comment 2 Alan Cox 2002-12-14 22:39:47 UTC
While this bug seemed irrelevant the non tty case has at least one interesting
abuse we should look at resolving. Moved to kernel where we need to do some of
the work.

Comment 4 Bugzilla owner 2004-09-30 15:38:47 UTC
Thanks for the bug report. However, Red Hat no longer maintains this version of
the product. Please upgrade to the latest version and open a new bug if the problem

The Fedora Legacy project (http://fedoralegacy.org/) maintains some older releases, 
and if you believe this bug is interesting to them, please report the problem in
the bug tracker at: http://bugzilla.fedora.us/

Note You need to log in before you can comment on or make changes to this bug.