Amendments to pconsole fast-track [PSARC/2009/275 FastTrack timeout 05/08/2009]

[Nicolas Williams]

On Mon, May 04, 2009 at 12:34:29PM -0500, Norm Jacobs wrote:
> James Carlson wrote:
> >Norm Jacobs writes:
> >  
> >>TIOCSTI appears to require  elevated privilege.  streamio.c appears to 
> >>do the auth checking in the kernel using secpolicy_sti(), which equates 
> >>    
> >
> >If you issue it on the controlling tty for this process and you have
> >at least read access, then you won't need extra privileges.  But, yes,
> >if you want to do it on someone else's tty, then you'll need all
> >privileges, as it's an escalation threat.
> >  
> It appears to want to use other's ttys.

Er, why?