Restrict tcsd input to uid root or group tss.
This prevents DOS (or worse) attacks on tcsd by restricting its input to
processes running with UID root or GID tss.
BUG=chromium-os:25099
TEST=installed trousers, verified that /var/run/tcsd.socket is
srw-rw---- 1 root tss, and verified that I can still log on.
Change-Id: I01824ca893ff2172833a9a9b1b98444269356764
Reviewed-on: https://gerrit.chromium.org/gerrit/16820
Reviewed-by: Darren Krahn <dkrahn@chromium.org>
Tested-by: Darren Krahn <dkrahn@chromium.org>
Commit-Ready: Darren Krahn <dkrahn@chromium.org>
1 file changed
