COMMAND
TIOCCONS
SYSTEMS AFFECTED
SunOs 4.1, 4.1_PSR_A, 4.1.1
PROBLEM
TIOCCONS can be used to re-direct console output/input away from
"console"
SOLUTION
Sun Bug ID 1008324. Sun Patch ID : for SunOS 4.1, SunOS
4.1_PSR_A 100187-01 Sun Patch ID : for SunOS 4.1.1 100188-01
The fix consists of adding permission checking to setcons, the
routine that does the work of console redirection, and changing
its callers to supply additional information required for the
check and to see whether or not the check succeeded. Setcons now
uses uid and gid information supplied to it as new arguments to
perform a VOP_ACCESS call for VREAD permission on the console.
If the caller doesn't have permission to read from the console,
setcons rejects the redirection attempt.