From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-yx0-f193.google.com (mail-yx0-f193.google.com [209.85.210.193]) by speech.braille.uwo.ca (Postfix) with ESMTP id C5A9110637 for ; Mon, 9 Nov 2009 23:35:15 -0500 (EST) Received: by yxe31 with SMTP id 31so3404594yxe.21 for ; Mon, 09 Nov 2009 20:35:15 -0800 (PST) Received: by 10.151.1.3 with SMTP id d3mr14862720ybi.305.1257827708679; Mon, 09 Nov 2009 20:35:08 -0800 (PST) Received: from lnx3.holmesgrown.com (ip72-208-233-7.ph.ph.cox.net [72.208.233.7]) by mx.google.com with ESMTPS id 22sm159690ywh.30.2009.11.09.20.35.06 (version=TLSv1/SSLv3 cipher=RC4-MD5); Mon, 09 Nov 2009 20:35:07 -0800 (PST) Date: Mon, 9 Nov 2009 21:35:49 -0700 From: Steve Holmes To: speakup@braille.uwo.ca Subject: Re: clipboard integration -- possible security implications Message-ID: <20091110043549.GB5619@lnx3.holmesgrown.com> Mail-Followup-To: speakup@braille.uwo.ca References: <20091020210034.GB32242@linux1> <4ADEC8D4.2040709@baechler.net> <20091021160241.GA16006@linux1> <4AE01077.7010607@baechler.net> <20091022153810.GA17686@linux1> <4AE1570D.8040105@baechler.net> <4ae199b3.6202be0a.6021.0c25@mx.google.com> <4AE2A9D0.3040603@baechler.net> <4ae31465.9553f10a.0aa0.1bec@mx.google.com> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii; x-action=pgp-signed Content-Disposition: inline In-Reply-To: <4ae31465.9553f10a.0aa0.1bec@mx.google.com> User-Agent: Mutt/1.5.20 (2009-06-14) X-BeenThere: speakup@braille.uwo.ca X-Mailman-Version: 2.1.12 Precedence: list Reply-To: "Speakup is a screen review system for Linux." List-Id: "Speakup is a screen review system for Linux." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 10 Nov 2009 04:35:16 -0000 -----BEGIN PGP SIGNED MESSAGE----- Hash: RIPEMD160 And to add to this suggestion, while in that same shell, you could pipe the pasted contents into xclip in much the same way and then you have it in the X clipboard also. I like the idea of the select group to hold all speakup settings. This would improve security issues in general, I think. I like the concept of using /sys/accessibility/speakup/clip or whatever to hold a file name that could then be used and owned by a specific user but I also understand the downside to this as was pointed out earlier in this thread. I wonder if tiing this business to virtual consoles wouldn't be a bad idea. I mean, think about it. First off, speakup would never be used by a remote user like over ssh; at least I can't imagine such a case. As I think about it right now, I would think that could be an excellent way to secure this aspect. If the speakup cut/paste feature is accessing the resource, any other users currently using the system are mostlikely not on the virtual consoles and would probably have no idea it was in use. I think the big question is how to get this speakup buffer over to the X clipboard. Xclip is an excellent program to do the job but this requires the shell AFAIK and the speakup clipboard could be piped into xclip somehow. On Sat, Oct 24, 2009 at 09:51:20AM -0500, Chris Brannon wrote: > Tony Baechler wrote: > > but I can think of cases where one would want a permanent > > copy in a file for use later. Just one example might be in cases where > > the machine needs to be rebooted (like a kernel upgrade) and a command > > needs to be run after the reboot which was copied into the clipboard. > > Here's one way to do that. > > * Make a selection. > * Cut. > * execute cat > stuff.txt > * Paste. > * Hit ctrl-d to indicate end-of-file. > * Voila! > > -- Chris > _______________________________________________ > Speakup mailing list > Speakup@braille.uwo.ca > http://speech.braille.uwo.ca/mailman/listinfo/speakup -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iEYEAREDAAYFAkr47aUACgkQWSjv55S0LfFfiQCgi4ijXy5/nsABrMZJdG8alwbx +H4An3lNYQHV0z45Sm9VNqOvC+y1ye+n =xvMx -----END PGP SIGNATURE-----