Detecting started xterm sessions

spavlov · #1 (**permalink**) 11-15-2002

Hi,

We have a bug in one of our applications which allows application users to start unix commands with application UID, and of course xterminals. Any ideas how to find out which terminals have been started without authorisation using this bug?

Thanks,
Slava

PS: OS is Solaris 8

roden · #2 (**permalink**) 11-15-2002

Start by obtaining the process id (PID) and parent process id (PPID) for each xterm that is running, crosscheck the PPID against your applications process ids (PIDs). If you find a match your application has started (forked) the xterm so you can terminate it with SIGKILL (kill -9 PID of xterm

.

You should also be able to find out the DISPLAY that the xterm is running against and start your own X program to warn of illegal use etc

Why not restrict permissions for xterm (etc) and use SUDO to control access to it?

More UNIX and Linux Forum Topics You Might Find Helpful
Thread	Thread Starter	Forum	Replies	Last Post
lan card not detecting	bidhayakm	SCO	3	04-18-2007 07:52 AM
Detecting Second disk	dragunu	UNIX for Dummies Questions & Answers	7	02-09-2007 04:45 AM
Detecting a key combination	mobile01	High Level Programming	11	12-22-2006 09:46 AM
Not detecting CD ROm drive	sbasetty	Gentoo	13	12-05-2006 11:00 AM
Setting Timeout for Xterm Sessions	jyotipg	UNIX for Advanced & Expert Users	1	07-09-2003 03:35 PM

Thread Tools	Search this Thread
Show Printable Version Email this Page	Search this Thread: Advanced Search
Display Modes	Rate This Thread
Switch to Linear Mode Hybrid Mode Switch to Threaded Mode	Rate This Thread:


	Powered by