From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-fx0-f47.google.com (mail-fx0-f47.google.com [209.85.161.47]) by speech.braille.uwo.ca (Postfix) with ESMTP id 5F934C1A3BD for ; Mon, 13 Dec 2010 11:52:07 -0500 (EST) Received: by fxm17 with SMTP id 17so6015276fxm.34 for ; Mon, 13 Dec 2010 08:52:06 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:message-id:from:to:references :in-reply-to:subject:date:mime-version:content-type :content-transfer-encoding:x-priority:x-msmail-priority:importance :x-mailer:disposition-notification-to:x-mimeole; bh=ragfqHJ/XNsb1AXB/WWjkMdXGPPDWLXJBcwCMwbuhhI=; b=tlNQ3GbNi5zFNS5OtWqnbFpLP21caWVsJe8OGpJpPN4TpNqV6XirxgHsV2aQMlwHA1 r/iWKPeBpYzzKFy+DUJL9YQyMDFtep/1RM9zOVmM9E8/DM53VTKLgBV/4c8Jb2W4bdE8 6no7wGkcsR9WSPRtCZgvFZJTqk0zlLtn+BWzc= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=message-id:from:to:references:in-reply-to:subject:date:mime-version :content-type:content-transfer-encoding:x-priority:x-msmail-priority :importance:x-mailer:disposition-notification-to:x-mimeole; b=Q4uTMkwK6LfB3Duxi2hvAoPfzTUK4Ukv6XEQpbsoSyhRhqeMDV5XTSveavtXVb8iMx EYzNJVqhd6WIJKRVovXY/9g9ALAPwXNprgQbk1pNOYuQe6JF2lN6h818WTrgP5DHqKFk oQ7k1Gy5RjXKUm6xPRGFzvJy5BRZU9SFK3/cA= Received: by 10.223.79.72 with SMTP id o8mr4554057fak.83.1292259126342; Mon, 13 Dec 2010 08:52:06 -0800 (PST) Received: from BardiaDator (s83-187-157-90.cust.tele2.se [83.187.157.90]) by mx.google.com with ESMTPS id r24sm1763347fax.27.2010.12.13.08.52.04 (version=SSLv3 cipher=RC4-MD5); Mon, 13 Dec 2010 08:52:05 -0800 (PST) Message-ID: <93564A09B17C45BE9B870D49EC802549@BardiaDator> From: To: "Speakup is a screen review system for Linux." References: <20101210190047.GA19219@kroah.com><87lj3wufx7.fsf@the-brannons.com> <20101211222834.GA27436@linux1><20101212023532.GA6486@const> <20101212182940.GB16883@kroah.com><20101213130612.GT5411@const.bordeaux.inria.fr> <20101213145306.GA8824@rivensight.dyndns.org> In-Reply-To: <20101213145306.GA8824@rivensight.dyndns.org> Subject: Re: World writable speakup files in Linux next Date: Mon, 13 Dec 2010 17:52:03 +0100 MIME-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal Importance: Normal X-Mailer: Microsoft Windows Live Mail 14.0.8089.726 X-MimeOLE: Produced By Microsoft MimeOLE V14.0.8089.726 X-BeenThere: speakup@braille.uwo.ca X-Mailman-Version: 2.1.13 Precedence: list Reply-To: "Speakup is a screen review system for Linux." List-Id: "Speakup is a screen review system for Linux." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 13 Dec 2010 16:52:07 -0000 how i install speakup in ubuntu -------------------------------------------------- From: "Frost" Sent: Monday, December 13, 2010 3:53 PM To: "Speakup is a screen review system for Linux." Subject: Re: World writable speakup files in Linux next > On Mon, Dec 13, 2010 at 02:06:12PM +0100, Samuel Thibault wrote: >> > >But, the world writable bit can be seen as a big security issue right >> > >now, right? It would be good to get that fixed, or at the very least, >> > >narrowed down a lot right now. > > Can't you just monitor for keyboard activity alone, as when > you're in a terminal console, operating the system remotely, you don't > need to issue commands to SpeakUP? Only at the local keyboard? > > Maybe it's too complicated because of the kernel or what-not. I > don't know. I just figure that if it's not coming from /dev/Stty#, then > the command should be allowed, or only allowed if the commands are being > issued by a logged in user at the console, unless it's a major security > risk to have the cat accidently pressing a SpeakUp key combo. If you > trust a person on your system enough to give them a user account, then > it stands reasonable that you alsod trust them enough not to F with /sys > and speakupconf without knowing what they're doing > > Michael > _______________________________________________ > Speakup mailing list > Speakup@braille.uwo.ca > http://speech.braille.uwo.ca/mailman/listinfo/speakup >