kbdcontrol -l affects all vty's, not just the current one

Simon 'corecode' Schubert corecode at fs.ei.tum.de
Mon Jun 21 01:52:08 PDT 2004


On 21.06.2004, at 06:04, nntp.dragonflybsd.org wrote:

(Simon 'corecode' Schubert pointed out that, even if the kbdmap was
per-vty, nothing would stop an unprivledged user from loading a 
keyboard
map of all NUL's, which would disable further logins and/or switching 
to
another vty.  So I'm not really sure what can be done about it...)
1) Make keyboard maps per-vty.
2) Make root the only user able to change keyboard maps on vtys.
If both of these changes are implemented, then only root users can 
shoot
themselves in the foot with an all-NULL keyboard map.
This breaks the intention of having keymaps adjustable almost 
completely. I prefer typing on an US keyboard layout but I'm in Germany 
and thus most keyboards, especially of "shared" computers (in the 
office) are German. But in fact, I'd like to load the US keymap so I 
can type properly. Won't work if root is the only one allowed to change 
keymaps.

A possible solution: Only allow setting keymaps owned by root (i.e. 
trusted keymaps)
or enforce certain restrictions (i.e. ALT + Fxx always work, so that 
you can switch to another vty)

plus, of course, the per-vty keymaps

cheers
  simon
--
/"\
\ /
 \     ASCII Ribbon Campaign
/ \  Against HTML Mail and News
Attachment:
PGP.sig
-------------- next part --------------
A non-text attachment was scrubbed...
Name: pgp00001.pgp
Type: application/octet-stream
Size: 186 bytes
Desc: "Description: This is a digitally signed message part"
URL: <http://lists.dragonflybsd.org/pipermail/bugs/attachments/20040621/9fe05920/attachment-0018.obj>


More information about the Bugs mailing list