Bug#869617: Acknowledgement (libutempter0: Helper executable multiply broken: can't add, can't del)

2020-02-20 Thread Taeer Bar-Yam
I think I understand the problem. Dimitry, please correct me if I'm wrong. Indeed it is not possible to do what we're trying to do Conrad, because what we want to do is change the `utmp` file from the position of any old program running on a terminal. This is a security problem because it allows

Bug#869617: Acknowledgement (libutempter0: Helper executable multiply broken: can't add, can't del)

2020-02-20 Thread Conrad Hughes
Hi Dmitry, Thanks for getting back to me. Unfortunately I remember little of what I learned while digging into this two years ago, so I don't know how to recognise a properly configured pseudo-terminal master device or a mis-configured operating system with a broken ptsname: I'm just running Debi

Bug#869617: Acknowledgement (libutempter0: Helper executable multiply broken: can't add, can't del)

2020-02-19 Thread Dmitry V. Levin
Hi, On Mon, Jul 24, 2017 at 10:26:40PM +0100, Conrad Hughes wrote: [...] > Origin: , > Bug: > Bug-Debian: https://bugs.debian.org/ > Bug-Ubuntu: https://launchpad.net/bugs/ > Forwarded: > Reviewed-By: > Last-Update: 2017-07-24 > > --- libutempter-1.1.6.orig/utempter.c > +++ libutempter-1.1.6/

Bug#869617: Acknowledgement (libutempter0: Helper executable multiply broken: can't add, can't del)

2017-07-24 Thread Conrad Hughes
Sorry, the subject line is somewhat erroneous since I was still testing things when I started the bug report: I think that logout/del works — utmpdump doesn't show all the changes I'd expect after logout/del, but /usr/bin/w does appear to show that logout has been enacted. The problem is just with

Bug#869617: Acknowledgement (libutempter0: Helper executable multiply broken: can't add, can't del)

2017-07-24 Thread Conrad Hughes
Oh dear. And I now realise that this is submitted under a non-existent release version of libutempter — that's the patched version of it I created in order to test out the core idea in the fix, sorry. On the offchance that it's any use, I attach the patch below. Conrad Description: Use ttyname,