lists.openwall.net   lists  /  announce  owl-users  owl-dev  john-users  john-dev  passwdqc-users  yescrypt  popa3d-users  /  oss-security  kernel-hardening  musl  sabotage  tlsify  passwords  /  crypt-dev  xvendor  /  Bugtraq  Full-Disclosure  linux-kernel  linux-netdev  linux-ext4  linux-hardening  linux-cve-announce  PHC 
Open Source and information security mailing list archives
 
Hash Suite: Windows password security audit tool. GUI, reports in PDF.
[<prev] [next>] [<thread-prev] [day] [month] [year] [list]
Date:	Sat, 31 May 2014 11:49:24 +0200
From:	Manuel Schoelling <manuel.schoelling@....de>
To:	Jakub Wilk <jwilk@...ian.org>
Cc:	plagnioj@...osoft.com, tomi.valkeinen@...com, geert@...ux-m68k.org,
	broonie@...aro.org, rdunlap@...radead.org, dh.herrmann@...il.com,
	airlied@...hat.com, mtosatti@...hat.com,
	linux-fbdev@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH] console: Add persistent scrollback buffers for all VGA
 consoles

On Sa, 2014-05-31 at 00:26 +0200, Jakub Wilk wrote:
> * Manuel Schölling <manuel.schoelling@....de>, 2014-05-30, 15:27:
> >Add a scrollback buffers for each VGA console. The benefit is that the 
> >scrollback history is not flushed when switching between consoles but 
> >is persistent.
> 
> Some people rely on this scrollback flushing as a security feature. Is 
> there even another way to clear the scrollback, than to switch to 
> another vt and then back again?
Thanks for raising this security issue! Maybe we should add something
like VT_FLUSH_SCROLLBACK to vt_ioctl()? [1]
I'm open for better ways to flush the scrollback history.

[1] http://lxr.free-electrons.com/source/drivers/tty/vt/vt_ioctl.c#L334

> Debian ships this:
> http://manpages.debian.org/cgi-bin/man.cgi?query=clear_console
> https://sources.debian.net/src/bash/4.2%2Bdfsg-0.1/debian/clear_console.c
> 


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/

Powered by blists - more mailing lists

Powered by Openwall GNU/*/Linux Powered by OpenVZ