Amendments to pconsole fast-track [PSARC/2009/275 FastTrack timeout 05/08/2009]

[Nicolas Williams]

On Tue, May 05, 2009 at 11:31:45AM -0500, Nicolas Williams wrote:
> Now, one possibility is that pconsole ought not need any privilege at
> all -- that strioctl()/secpolicy_sti() should allow this ioctl when the
> caller a) owns the pty and b) has PRIV_PROC_SESSION.  After all, the
> caller could just debug the terminal process to insert the desired
> characters into the pty master...

Incidentally, if strioctl()/secpolicy_sti() were changed as suggested
then pconsole wouldn't need any changes since it ignores the results of
seteuid(2), and wouldn't need any non-basic privs.

Nico
--