openssh unix dev - Feb 2002 - [Bug 120] sshd fails pty chown() when run as non-root userid

http://bugzilla.mindrot.org/show_bug.cgi?id=120





------- Additional Comments From markus at openbsd.org  2002-02-19 04:29 -------
can you allocate ptys as non-root?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=120





------- Additional Comments From idallen at freenet.carleton.ca  2002-02-19
04:56 -------
Yes, the previous (non-open) version of sshd that I compiled and installed on
this AIX machine worked fine, even though it couldn't chown the ptys.  The
AIX
ptys are set up this way:
acadaix%~[507] ls -l /dev/pts/99
crw-rw-rw-   1 root     system    25, 99 Apr 25 2001  /dev/pts/99
You can use them, you just can't chown them!




------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=120





------- Additional Comments From markus at openbsd.org  2002-02-19 05:03 -------
can other users access the tty and snoop data?



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=120





------- Additional Comments From idallen at freenet.carleton.ca  2002-02-19
20:37 -------
I'm not a pty expert.  I don't think you can "snoop"
characters from a pty
without preventing them from going to the original application.  If the pty
is opened O_EXCL, I think that locks out anyone else.  (Actually, given
the documentation below, it seems that only one process can open the
control half of the pty even without O_EXCL.)  Certainly many 
unpriv applications manage to use ptys without being root.  I just haven't
programmed that in a decade or so, so I don't know the current methodology.

http://bugzilla.mindrot.org/show_bug.cgi?id=120





------- Additional Comments From stevesk at pobox.com  2002-02-20 07:57 -------
for systems with STREAMS ptys grantpt() calls a set-uid
helper program to change pty ownership and modes.
with some investigation and rework of pty handling we could
potentially use this behaviour for certain platforms.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.