Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Sun, 19 Mar 2023 09:18:21 +0100
From: Hanno Böck <>
To: Jakub Wilk <>
Subject: Re: TTY pushback vulnerabilities / TIOCSTI

On Fri, 17 Mar 2023 20:41:02 +0100
Jakub Wilk <> wrote:

> TIOCLINUX implements also functionality unrelated to copying and 
> pasting. See the ioctl_console(2) man page:
> For example, apparently some of this stuff is used by systemd:

Ok, good point. So disabling TIOCLINUX isn't an option.

Looking into it, maybe restricting any TIOCLINUX sub features that
implement anything related to selection would be a good option. The gpm
daemon runs as root anyway.

Do you see any risk left if
are no longer accessible to non-privileged processes?

Hanno Böck

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.