Re: recent gpm DoS issue

2000-07-28 Thread Ethan Benson
On Fri, Jul 28, 2000 at 08:11:12AM +, Jim Breton wrote: > On Thu, Jul 27, 2000 at 11:56:03PM -0800, Ethan Benson wrote: > > pam_group is only relativly secure if your system is installed and > > configured a certain way: > > Yup, some of that is mentioned in the documentation... nevertheless,

Re: recent gpm DoS issue

2000-07-28 Thread Ethan Benson
On Fri, Jul 28, 2000 at 08:11:12AM +, Jim Breton wrote: > On Thu, Jul 27, 2000 at 11:56:03PM -0800, Ethan Benson wrote: > > pam_group is only relativly secure if your system is installed and > > configured a certain way: > > Yup, some of that is mentioned in the documentation... nevertheless,

Re: recent gpm DoS issue

2000-07-28 Thread Zak Kipling
On Fri, 28 Jul 2000, Jim Breton wrote: > And the file only exists while gpm is running (it's removed when you > stop gpm) so I am guessing it is the socket through which clients read > mouse data. Isn't that /dev/gpmdata? -- Zak Kipling, Girton College, Cambridge. "As long as the superstition

Re: recent gpm DoS issue

2000-07-28 Thread Zak Kipling
On Fri, 28 Jul 2000, Jim Breton wrote: > And the file only exists while gpm is running (it's removed when you > stop gpm) so I am guessing it is the socket through which clients read > mouse data. Isn't that /dev/gpmdata? -- Zak Kipling, Girton College, Cambridge. "As long as the superstition

Re: recent gpm DoS issue

2000-07-28 Thread Jim Breton
On Thu, Jul 27, 2000 at 11:56:03PM -0800, Ethan Benson wrote: > pam_group is only relativly secure if your system is installed and > configured a certain way: Yup, some of that is mentioned in the documentation... nevertheless, it would be a big improvement over making the socket world-writable.

Re: recent gpm DoS issue

2000-07-28 Thread Ethan Benson
On Fri, Jul 28, 2000 at 06:53:51AM +, Jim Breton wrote: > Do we have any plans in the works for a fix similar to what Red Hat are > doing? > > Running potato here, and the permissions on /dev/gpmctl are indeed 777. > > I am thinking about changing the group ownership on mine to "mouse" > (cre

should login.defs allow explicit specification of secure ttys?

2000-07-28 Thread Jim Breton
I was just about to send this to bugs with a severity of "wishlist" but then I figured maybe I'd throw it out here first. Package: login Version: 19990827-20 Severity: wishlist Hello. I was reading the login.defs man page and noted this: CONSOLE /etc/consoles o

recent gpm DoS issue

2000-07-28 Thread Jim Breton
Do we have any plans in the works for a fix similar to what Red Hat are doing? Running potato here, and the permissions on /dev/gpmctl are indeed 777. I am thinking about changing the group ownership on mine to "mouse" (creating that group) and using the /etc/security/group.conf mechanism to put

Re: recent gpm DoS issue

2000-07-28 Thread Jim Breton
On Thu, Jul 27, 2000 at 11:56:03PM -0800, Ethan Benson wrote: > pam_group is only relativly secure if your system is installed and > configured a certain way: Yup, some of that is mentioned in the documentation... nevertheless, it would be a big improvement over making the socket world-writable.

Re: recent gpm DoS issue

2000-07-28 Thread Ethan Benson
On Fri, Jul 28, 2000 at 06:53:51AM +, Jim Breton wrote: > Do we have any plans in the works for a fix similar to what Red Hat are > doing? > > Running potato here, and the permissions on /dev/gpmctl are indeed 777. > > I am thinking about changing the group ownership on mine to "mouse" > (cr