BSD tty security, part 3: How to Fix It

[John F Haugh II]

In article <17916:May522:46:2091 at kramden.acf.nyu.edu> brnstnd at kramden.acf.nyu.edu (Dan Bernstein) writes:
>It won't be any extra work if they pick the current maximum fd and
>kludge getdtablesize() to subtract 1 from its answer. In any case, all
>that's important for security is that *some* file descriptor be used
>rather than the old /dev/tty driver.

Naw, this is still more than you have to do.  What happens if I move
u.u_ttyd from the u-page to the process table?  The reason you want to
use a file descriptor is because the file table is accessible - u_ttyd
isn't.  How about fixing that problem instead of creating another
hack?
-- 
John F. Haugh II        | Distribution to  | UUCP: ...!cs.utexas.edu!rpp386!jfh
Ma Bell: (512) 255-8251 | GEnie PROHIBITED :-) |  Domain: jfh at rpp386.cactus.org
"If liberals interpreted the 2nd Amendment the same way they interpret the
 rest of the Constitution, gun ownership would be mandatory."