[Pkg-utopia-maintainers] Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

Samuel Thibault sthibault at debian.org
Tue Jul 3 18:21:11 UTC 2012


Hello,

> gpm uses one clip-board space for all users (including root).  So if
> any of them marks anything sensitive, a following user can gather this
> information.

gpm does not implement the paste functionality, it's all handled in the
kernel. gpm only calls ioctl(TIOCLINUX) to set the selection (by only
giving the coordinates!), and make the kernel paste.

Not allowing cross-user copy/paste would be a big regression. I use it
quite often for instance.

Systematically clearing the selection on log-out could be unconvenient
too.

Clearing the selection when nobody is logged any more, however, should
be fine.  As long as a user is logged in, if somebody else comes over
the keyboard he'll be able to do other nasty things anyway.  I believe
that can be implemented in consolekit, it merely needs to do the ioctl
on last logout.  There is no need for gpm patch anyway, it's all in the
kernel.

Samuel



More information about the Pkg-utopia-maintainers mailing list