Re: TTY pushback vulnerabilities / TIOCSTI

[Peter Bex <peter () more-magic net>]

On Tue, Mar 14, 2023 at 09:51:03AM +0100, Hanno Böck wrote:
> This seems to be the only real mitigation for this issue. It appears
> su has a parameter, and in sudo one can configure the creation of a new
> pty in the sudoers file. I don't consider these as satisfying fixes, as
> they are optinal, and thus rely on the expectation that users are aware
> of this risk and manually use these mitigations. That does not seem
> realistic to me.

Indeed, opendoas (the portable version of OpenBSD's "doas") has this
exact bug as well: https://github.com/Duncaen/OpenDoas/issues/106

Cheers,
Peter

Attachment: signature.asc
Description: