kpty warnings on OpenBSD

[Dave Feustel]

On Monday 13 December 2004 04:22 pm, Adriaan de Groot wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Monday 13 December 2004 22:18, Waldo Bastian wrote:
> > On Monday 13 December 2004 18:45, Dave Feustel wrote:
> > > On Monday 13 December 2004 12:29 pm, Waldo Bastian wrote:
> > > > On Monday 13 December 2004 18:15, Dave Feustel wrote:
> > > > > I am getting  the error messeges below when I run
> > > > > startkde. There is no chownpty  in openbsd. How
> > > > > do I correct this apparent security problem?
> > > > >
> > > > > kdecore (KProcess): WARNING: chownpty failed for device
> > > > > /dev/ptyp0::/dev/ttyp0 This means the communication can be
> > > > > eavesdropped. kdecore (KProcess): WARNING: chownpty failed for device
> > > > > /dev/ptyp1::/dev/ttyp1 This means the communication can be
> > > > > eavesdropped.
> 
> You may want to just take a look at the permissions of those ptys after 
> starting konsole -- I remember seeing this warning nearly always on FreeBSD, 
> and it didn't ever leave the ptys in a state that was eavesdroppable, as far 
> as I could tell. To some extent I'd say this issue is "mine", since I got it 
> to work on FBSD aways back.

I have spent a lot of time looking  at the tty and pseudo-tty devices
and I can't see anything that  alarms me except for /dev/log:
(I worry about the  s flag)

srw-rw-rw-  1 root  wheel  0 Dec 13 07:52 /dev/log

> Oh, also do check your kgrantpty for permissions.

How do I do this (I couldn't find kgrantpty in file system)
 
> Which OBSD version is this? 

OpenBSD 3.6 Release (the most recent, from cdrom)

> In the worst case I can dump my SuSE install  
> (blech, anyway :) ) and stick OBSD on a crash- (yet very secure) box.
> 
> - -- 
> Don't worry, 't ain't no shame to be stupid - ol' mouse.
>     GPG: FEA2 A3FE Adriaan de Groot
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.6 (FreeBSD)
> 
> iD8DBQFBvgg1dqzuAf6io/4RAuuqAKCJPTgp1S5y1A4lGV9ZFwjzdd+tCgCePmV3
> 9VjievPwSOWwFRX2HLJU8IA=
> =H8x3
> -----END PGP SIGNATURE-----
>