Re: devfs initial permissions

Robert Bihlmeyer (robbe@orcus.priv.at)
13 Jan 1998 11:16:25 +0100


Hi,

>>>>> On Mon, 12 Jan 1998 10:37:54 +0100
>>>>> Andreas Jellinghaus <aj@dungeon.inka.de> said:

Andreas> for example : look at your own system : what permission do
Andreas> your mouse devices have ? writing to mouse devices can at
Andreas> least freeze X11. if you have no way to telnet to your
Andreas> machine ... someone reported he could do harm the system
Andreas> with writing to /dev/psaux (see bugtraq report).

I just froze X with that. On some combinations (XFree86 3.3.1/Linux
2.0.30/serial ms-mouse) you can control the mouse without X crashing
by writing to /dev/ttySxx. So if root has, for example, XEmacs running
(or accessible via wm-menu) and does not look at the screen...

Robbe

-- 
Robert Bihlmeyer	reads: Deutsch, English, MIME, Latin-1, NO SPAM!
<robbe@orcus.priv.at>	<http://stud2.tuwien.ac.at/~e9426626/sig.html>