[Pkg-utopia-maintainers] Bug#677418: Due Debian bug #677418 -- gpm sharing clipboard between different users

[Christoph Anton Mitterer]

On Tue, 2012-07-03 at 15:21 -0300, Samuel Thibault wrote:
> gpm does not implement the paste functionality, it's all handled in the
> kernel. gpm only calls ioctl(TIOCLINUX) to set the selection (by only
> giving the coordinates!), and make the kernel paste.
Well... but in principle there must be some way for it to control
pasting, as pasting doesn't work when gpm is not running...


> Not allowing cross-user copy/paste would be a big regression. I use it
> quite often for instance.
Ok,... I also use it,... but nevertheless it's a security hole.
You could argue the same way that all user share a common X.org
clipboard - just because it's handy.

A "solution" might be to add a configuration option, that allows
cross-user copy/pasting... but that should then be disabled per default,
IMHO.


> Clearing the selection when nobody is logged any more, however, should
> be fine.  As long as a user is logged in, if somebody else comes over
> the keyboard he'll be able to do other nasty things anyway.
As mentioned before several times:
don't think that limited, that console access always means begin
directly at the hardware with a keyboard... just think about serial
console via some network adapters...



Cheers,
Chris.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 6014 bytes
Desc: not available
URL: <http://lists.alioth.debian.org/pipermail/pkg-utopia-maintainers/attachments/20120709/eda203f5/attachment-0001.bin>