Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

2012-07-09 Thread Christoph Anton Mitterer
On Tue, 2012-07-03 at 15:21 -0300, Samuel Thibault wrote: gpm does not implement the paste functionality, it's all handled in the kernel. gpm only calls ioctl(TIOCLINUX) to set the selection (by only giving the coordinates!), and make the kernel paste. Well... but in principle there must be

Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

2012-07-09 Thread Samuel Thibault
Christoph Anton Mitterer, le Mon 09 Jul 2012 20:28:55 +, a écrit : On Tue, 2012-07-03 at 15:21 -0300, Samuel Thibault wrote: gpm does not implement the paste functionality, it's all handled in the kernel. gpm only calls ioctl(TIOCLINUX) to set the selection (by only giving the

Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

2012-07-09 Thread Christoph Anton Mitterer
On Mon, 2012-07-09 at 23:50 +0200, Samuel Thibault wrote: As said above: when it receives a mouse click, it uses ioctl(TIOCLINUX) to make the kernel paste. But it doesn't even know what is being pasted. Ah,... I now I see... so one would need to implement in the kernel, that every user has it's

Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

2012-07-09 Thread Samuel Thibault
Christoph Anton Mitterer, le Tue 10 Jul 2012 00:08:22 +0200, a écrit : On Mon, 2012-07-09 at 23:50 +0200, Samuel Thibault wrote: As said above: when it receives a mouse click, it uses ioctl(TIOCLINUX) to make the kernel paste. But it doesn't even know what is being pasted. Ah,... I now I

Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

2012-07-09 Thread Christoph Anton Mitterer
On Tue, 2012-07-10 at 00:16 +0200, Samuel Thibault wrote: Such kinds of questions are quite frowned upon. Uhm.. yeah well... but there are already quite a lot of them... and I personally consider them to be quite ok, when the priority is reasonably set... What does use gpm mean exactly?

Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

2012-07-09 Thread Samuel Thibault
Christoph Anton Mitterer, le Tue 10 Jul 2012 00:51:23 +0200, a écrit : Is the content of the consoles exactly the same as what's physically displayed on the machine? Cannot check here now, sorry, access to the building is highly restricted. Can somebody connect to the console too and see

Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

2012-07-03 Thread Samuel Thibault
Hello, gpm uses one clip-board space for all users (including root). So if any of them marks anything sensitive, a following user can gather this information. gpm does not implement the paste functionality, it's all handled in the kernel. gpm only calls ioctl(TIOCLINUX) to set the selection

Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

2012-06-25 Thread Christoph Anton Mitterer
Hey Nico, et al. On Thu, 2012-06-21 at 14:34 +0200, Nico Schottelius wrote: I'm not sure what's the news with this bug. It should be clear to anyone using gpm that every local user has access to its buffer. Well the thing is, that this IS a security problem be it new, or not :) I don't

Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

2012-06-21 Thread Nico Schottelius
Hello, I'm not sure what's the news with this bug. It should be clear to anyone using gpm that every local user has access to its buffer. I don't even believe this is a bug - but a feature: You can cat on one console as $foouser and paste on another console as $other use. You can open up a CVE

Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

2012-06-20 Thread Christoph Anton Mitterer
On Fri, 2012-06-15 at 12:07 +0200, Jan Lieskovsky wrote: As noted, didn't file Red Hat Bugzilla bug yet, since I am not completely sure this is a security issue (and first wanted to obtain feedback from gpm developers / upstream). Yeah that's okay,... but I think it's good to record other

Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

2012-06-15 Thread Jan Lieskovsky
Hi Chris, thank you for your reply. On 06/15/2012 02:03 AM, Christoph Anton Mitterer wrote: Hi. First gpm has no bug tracker right? So could you please CC the Debian bug, that we can record all this at some central palce? :) As noted, didn't file Red Hat Bugzilla bug yet, since I am

Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

2012-06-14 Thread Christoph Anton Mitterer
Hi. First gpm has no bug tracker right? So could you please CC the Debian bug, that we can record all this at some central palce? :) On Thu, 2012-06-14 at 11:06 +0200, Jan Lieskovsky wrote: [1] http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=677418 I've updated some information there: