> How is this a possible security risk? St shouldn’t be used to control > login shells. It’s there to show escape sequences jump around on a > screen.
The problem is that the terminal emulation is too much related to the pty stuff. The program who create the master/slave is the responsable of doing all this things. Maybe we could split it, and put all the emulation in only one program free all the pty stuff.