[alt.security] bug in open

ash@jec312.its.rpi.edu (Arthur Hyun) (04/05/91)

We've found (we think) a bug in open().

(from man termio)

     If  a process that is a session leader, and that does
     not have a controlling terminal, opens a terminal  file  not
     already  associated  with a session, the terminal associated
     with that terminal file becomes the controlling terminal for
     that process, and the terminal's distinguished process group
     is set to the process group of  that  process.   (Currently,
     this also happens if a process that does not have a control-
     ling terminal and is not a member of a process group opens a
     terminal.   In  this case, if the terminal is not associated
     with a session, a new session  is  created  with  a  process
     group ID equal to the process ID of the process in question,
     and the terminal is assigned to that session.   The  process
     is made a member of the terminal's process group.)

The problem is that all this just doesn't happen under SunOS 4.1.x.
Presumably this is a bug, since it conflicts with the man page info.
Also, I hear it still works correctly in 4.0.3.

Particularly to users of 'screen', this bug presents a possible
security hole.  Be advised.
                                                  cheers,
                                                  arthur
-- 
                 ash@rpi.edu                    76 College Avenue, Apartment 1
         sammael@acm.rpi.edu    Arthur Hyun     Troy, New York  12180-3525
    userglf8@rpitsmts.BITNET                    518-273-5295
         "Art does not need praise; art is its own praise." (anon)