D57233.id179468.diff
No OneTemporary
Actions

Size

694 B

Referenced Files

None

Subscribers

None

D57233.id179468.diff
View Options

	diff --git a/sys/kern/tty.c b/sys/kern/tty.c
	--- a/sys/kern/tty.c
	+++ b/sys/kern/tty.c
	@@ -101,6 +101,10 @@
	SYSCTL_INT(_kern, OID_AUTO, tty_drainwait, CTLFLAG_RWTUN,
	&tty_drainwait, 0, "Default output drain timeout in seconds");

	+static bool tty_tiocsti = true;
	+SYSCTL_BOOL(_security_bsd, OID_AUTO, tiocsti, CTLFLAG_RWTUN,
	+ &tty_tiocsti, 0, "Allow TIOCSTI ioctl");
	+
	/*
	* Set TTY buffer sizes.
	*/
	@@ -1651,6 +1655,10 @@
	static int
	tty_sti_check(struct tty tp, int fflag, struct thread td)
	{
	+ /* Check for global disable. */
	+ if (!tty_tiocsti)
	+ return (EPERM);
	+
	/* Root can bypass all of our constraints. */
	if (priv_check(td, PRIV_TTY_STI) == 0)
	return (0);