linux-kernel - Re: [PATCH] console: Add persistent scrollback buffers for all VGA consoles

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <1401529764.4646.12.camel@schoellingm.dzne.de>
Date:	Sat, 31 May 2014 11:49:24 +0200
From:	Manuel Schoelling <manuel.schoelling@....de>
To:	Jakub Wilk <jwilk@...ian.org>
Cc:	plagnioj@...osoft.com, tomi.valkeinen@...com, geert@...ux-m68k.org,
	broonie@...aro.org, rdunlap@...radead.org, dh.herrmann@...il.com,
	airlied@...hat.com, mtosatti@...hat.com,
	linux-fbdev@...r.kernel.org, linux-kernel@...r.kernel.org
Subject: Re: [PATCH] console: Add persistent scrollback buffers for all VGA
 consoles

On Sa, 2014-05-31 at 00:26 +0200, Jakub Wilk wrote:
> * Manuel Schölling <manuel.schoelling@....de>, 2014-05-30, 15:27:
> >Add a scrollback buffers for each VGA console. The benefit is that the 
> >scrollback history is not flushed when switching between consoles but 
> >is persistent.
> 
> Some people rely on this scrollback flushing as a security feature. Is 
> there even another way to clear the scrollback, than to switch to 
> another vt and then back again?
Thanks for raising this security issue! Maybe we should add something
like VT_FLUSH_SCROLLBACK to vt_ioctl()? [1]
I'm open for better ways to flush the scrollback history.

[1] http://lxr.free-electrons.com/source/drivers/tty/vt/vt_ioctl.c#L334

> Debian ships this:
> http://manpages.debian.org/cgi-bin/man.cgi?query=clear_console
> https://sources.debian.net/src/bash/4.2%2Bdfsg-0.1/debian/clear_console.c
> 


--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@...r.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Please read the FAQ at  http://www.tux.org/lkml/