🚀 go-pugleaf

Re: writeable terminals by all allowing anyone to stuff you up.

This is so obvious that I thought everyone must have fixed it. Of course
you can't allow your terminal to be writable by all except in the most
trusting of environments. A simple solution is to have all terminals
group owned by a controlled pseudo user (eg "daemon" on our system, or "bin"
if you like), and make the "write" command set-gid to that user. The real
owner of the terminal can then turn on or off the group write permits as
they like (via "mesg" or directly) and no-one can do funny things to your
terminal, except by using "write", and even this, only when people allow
it. Then the "write" program can be made to filter out control characters,
which these days with supersmart terminals are just as painful as going
into raw mode.

						Stephen Frede

					...decvax!mulga!stephenf:elecvax