Amendments to pconsole fast-track [PSARC/2009/275 FastTrack timeout 05/08/2009]

[James Carlson]

Norm Jacobs writes:
> TIOCSTI appears to require  elevated privilege.  streamio.c appears to 
> do the auth checking in the kernel using secpolicy_sti(), which equates 

If you issue it on the controlling tty for this process and you have
at least read access, then you won't need extra privileges.  But, yes,
if you want to do it on someone else's tty, then you'll need all
privileges, as it's an escalation threat.

I think the safer way to do this (rather than having to hand out all
privileges, and assuming I understand the original pconsole case
correctly) would be to insert characters by just writing on the master
side of the pty.

-- 
James Carlson, Solaris Networking              <james.d.carlson at sun.com>
Sun Microsystems / 35 Network Drive        71.232W   Vox +1 781 442 2084
MS UBUR02-212 / Burlington MA 01803-2757   42.496N   Fax +1 781 442 1677