Very Computer

>I believe most ppl R aware about this kindda DoS as reported ... so how
>to disable everyone except the owner from getting  write access to
>terminal on RH 6.0.  One way (very lame and this is what I did :() is to
>chmod 600 /dev/pts/* but this is not effective as new terminale opened
>will still be crw--w--w-.

> >I believe most ppl R aware about this kindda DoS as reported ... so
how
> >to disable everyone except the owner from getting  write access to
> >terminal on RH 6.0.  One way (very lame and this is what I did :() is
to
> >chmod 600 /dev/pts/* but this is not effective as new terminale
opened
> >will still be crw--w--w-.

> Just change/add the string mode=620,gid=5 to the line describing the
> devpts filesystem in /etc/fstab.  It'll give the new ptys the right
> permission and make sure the ptys are in the tty group.
> --
> ------------------------------------------------------------------

> Suchandra S. Thapa

> ------------------------------------------------------------------

>> >I believe most ppl R aware about this kindda DoS as reported ... so
>how
>> >to disable everyone except the owner from getting  write access to
>> >terminal on RH 6.0.  One way (very lame and this is what I did :() is
>to
>> >chmod 600 /dev/pts/* but this is not effective as new terminale
>opened
>> >will still be crw--w--w-.

>> Just change/add the string mode=620,gid=5 to the line describing the
>> devpts filesystem in /etc/fstab.  It'll give the new ptys the right
>> permission and make sure the ptys are in the tty group.

> >> >I believe most ppl R aware about this kindda DoS as reported ...
so
> >how
> >> >to disable everyone except the owner from getting  write access to
> >> >terminal on RH 6.0.  One way (very lame and this is what I did :()
is
> >to
> >> >chmod 600 /dev/pts/* but this is not effective as new terminale
> >opened
> >> >will still be crw--w--w-.

> >> Just change/add the string mode=620,gid=5 to the line describing
the
> >> devpts filesystem in /etc/fstab.  It'll give the new ptys the right
> >> permission and make sure the ptys are in the tty group.

> Or use 600, quite fine.
> [...]
> >It would not work for rxvt.
> Use the latest version, 2.6.0. You can use a previous one with some
> changes but since the release supports Unix98 PTYs out of the box ...

> Minor note, if it does not compiler adjust config.h so ... aehm ...
IIRC
> I'd to comment out either RXVT_WMTPX_FILE or RXVT_UTMPX_FILE manually.

> Cheers,
> Juergen

> --
> \ Real name     : Jrgen Heinzl                 \       no flames
/

/