Bug 239070 - (CVE-2007-2797) CVE-2007-2797 Wrong settings for the tty (mesg: error: tty device is not owned by group `tty')
CVE-2007-2797 Wrong settings for the tty (mesg: error: tty device is not owne...
Product: Security Response
Classification: Other
Component: vulnerability (Show other bugs)
All Linux
medium Severity medium
: ---
: ---
Assigned To: Red Hat Product Security
: EasyFix, Regression, Security
: 247429 (view as bug list)
Depends On:
  Show dependency treegraph
Reported: 2007-05-04 14:23 EDT by Klaus Ethgen
Modified: 2016-07-06 18:33 EDT (History)
2 users (show)

See Also:
Fixed In Version: RHSA-2007-0701
Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of:
Last Closed: 2007-11-15 10:02:42 EST
Type: ---
Regression: ---
Mount Type: ---
Documentation: ---
Verified Versions:
Category: ---
oVirt Team: ---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: ---

Attachments (Terms of Use)

  None (edit)
Description Klaus Ethgen 2007-05-04 14:23:21 EDT
Description of problem:
The new xterm with upgrade 5 of WS4 set the permissions of the tty in a wrong 
way. Everytime I open a new terminal I get the message:

mesg: error: tty device is not owned by group `tty'

In fact the tty is owned by my native group.

Version-Release number of selected component (if applicable):
The bug is in xterm-192-7.el4
The version xterm-192-4.EL4 is error free

Steps to Reproduce:
1. Install xterm-192-7.el4
2. Start a xterm
3. Optional "ls -l `tty`"
Actual results:
The message "mesg: error: tty device is not owned by group `tty'" and wrong 
rights of `tty`

Expected results:
a tty with the group rights tty

Additional info:
This bug was also on Debian/GNU Linux more than one year ago. The bug is still 
on state "pending" but should be closed as the problem is gone (also long time 
ago): http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=349924
Comment 1 Miroslav Lichvar 2007-05-07 04:14:16 EDT
Unfortunately a change in build environment caused a wrong group to be used as
tty group.
Comment 2 RHEL Product and Program Management 2007-05-07 04:26:31 EDT
This bugzilla has Keywords: Regression.  

Since no regressions are allowed between releases, 
it is also being proposed as a blocker for this release.  

Please resolve ASAP.
Comment 3 Thomas E. Dickey 2007-05-07 06:11:59 EDT
Does the RPM use "--with-tty-group"?
I thought that would address this area.
Comment 4 Miroslav Lichvar 2007-05-07 06:28:51 EDT
The option fixes the problem, but it was introduced in a later version than the
version packaged in RHEL4.
Comment 5 Miroslav Lichvar 2007-07-09 06:06:37 EDT
*** Bug 247429 has been marked as a duplicate of this bug. ***
Comment 11 errata-xmlrpc 2007-11-15 10:02:42 EST
An advisory has been issued which should help the problem
described in this bug report. This report is therefore being
closed with a resolution of ERRATA. For more information
on the solution and/or where to find the updated files,
please follow the link below. You may reopen this bug report
if the solution does not work for you.


Note You need to log in before you can comment on or make changes to this bug.