[Pkg-sysvinit-devel] Bug#367432: initscripts: Still different TTY permissions in /etc/login.defs and /etc/default/devpts

[Roger Leigh]

On Thu, Nov 22, 2012 at 10:16:01AM +0100, Jan Sievers wrote:
> The mentioned difference still exists.

In the current version (2.88dsf-34), /etc/default/default/devpts
defaults to 0620.  /etc/login.defs is setting TTYPERM 0600.
The devpts setting appears to be taking precedence; not sure why
since this is just a mount option for devpts, while the TTYPERM
should take effect at login time.  Might be worth asking the
login maintainer or seeing why it's not being used.

> While most people probably don't care about bsd-write and Co., an
> administrator of a multiuser machine should.
> 
> Since it has become quite uncommon to use these programs, a default of
> 
> TTYMODE=0600
> 
> would result in one thing less to think about.

Is this an issue in practice?  You do need to additionally install
a setgid tty tool e.g. write in bsdmainutils as well.

It's too late to change this for wheezy, but could be revisited for
jessie.


Regards,
Roger

-- 
  .''`.  Roger Leigh
 : :' :  Debian GNU/Linux    http://people.debian.org/~rleigh/
 `. `'   schroot and sbuild  http://alioth.debian.org/projects/buildd-tools
   `-    GPG Public Key      F33D 281D 470A B443 6756 147C 07B3 C8BC 4083 E800