From: Petr V. <VAN...@vc...> - 2000-06-08 09:57:20
|
On 7 Jun 00 at 21:13, James Simmons wrote: > userland app can access these raw devices and they ignore the VT switching > api then can see the hardware's data. So if you open /dev/fb and mmap the > vidoe memory then VT switch. What you type on that text console will be > present in the framebuffers memory that another process can see. Big > security hole. Are you sure that it is so big security hole? You started processes on both VT's, if you were allowed to switch them... Oops, there is special case when you have syslog printing output to screen... But oops again, there is only one difference - without mmapping /dev/fb YOU have to read screen and write it down, with /dev/fb software can do it for you... I think that it is not so big problem. Only missing part is add `hangup' to all these input/output devices, so that logout can cause disconnects for running mmap /dev/fb (or /dev/dsp...), like it disconnects backgrounded processes from /dev/tty... > > MediumRaw is seldomly used - and is event numbers again. > > Do you think we can get ride of it? I vote to get ride of it. XF68_FBDev worked only with raw->mediumraw patch in XFree 3.3.x... Best regards, Petr Vandrovec van...@vc... |