Re: TTY pushback vulnerabilities / TIOCSTI

[Jakub Wilk <jwilk () jwilk net>]

* Hanno Böck <hanno () hboeck de>, 2023-03-19 09:18:
> maybe restricting any TIOCLINUX sub features that implement anything 
> related to selection would be a good option. The gpm daemon runs as 
> root anyway.
>
> Do you see any risk left if
> TIOCL_SETSEL
> TIOCL_PASTESEL
> TIOCL_SELLOADLUT
> are no longer accessible to non-privileged processes?

I think that should be fine.

--
Jakub Wilk