Re: can't loadkeys anymore? (was Re: Linux-2.6.15.4 login errors)

Re: can't loadkeys anymore? (was Re: Linux-2.6.15.4 login errors)

[Robert Hancock]

John M Flinchbaugh wrote:
> On Thu, Feb 16, 2006 at 09:28:25AM -0500, Dave Jones wrote:
>> On Thu, Feb 16, 2006 at 09:13:46AM -0500, linux-os (Dick Johnson) wrote:
>>  > After installing linux-2.6.15.4, attempts to log in a non-root
>>  > account gives these errors.
>>  > Password:
>>  > Last login: Thu Feb 16 08:53:20 on tty1
>>  > Keymap 0: Permission denied
>>  > Keymap 1: Permission denied
>>  > Keymap 2: Permission denied
>>  > LDSKBENT: Operation not permitted
>>  > loadkeys: could not deallocate keymap 3
>> It's coming from unicode_start
>>  > This is a RH Fedora base. Anybody know how to turn this crap off?
>> Apply updates.
>> This was fixed in kbd 1.12-10.fc4.1
> 
> This still leaves the question: Why is loadkeys no longer permitted to
> set the keymap for a tty the user currently owns?  What if the user
> really does want to run loadkeys without having to be root (ie. to load
> dvorak keymap)?
> 

I believe remapping keys on the console is no longer permitted for 
non-root users for security reasons, i.e. to prevent people from 
remapping keys so that the next person who logs in will unwittingly run 
specific commands with root privileges, etc.

-- 
Robert Hancock      Saskatoon, SK, Canada
To email, remove "nospam" from hancockr@nospamshaw.ca
Home Page: http://www.roberthancock.com/

Linux-2.6.15.4 login errors

[linux-os (Dick Johnson)]

After installing linux-2.6.15.4, attempts to log in a non-root
account gives these errors.

Password:
Last login: Thu Feb 16 08:53:20 on tty1
Keymap 0: Permission denied
Keymap 1: Permission denied
Keymap 2: Permission denied
LDSKBENT: Operation not permitted
loadkeys: could not deallocate keymap 3

I have searched /etc/profile, /etc/bashrc, all the scripts in
/etc/profile.d. I can't find where loadkeys is even executed!

This is a RH Fedora base. Anybody know how to turn this crap off?

Cheers,
Dick Johnson
Penguin : Linux version 2.6.15.4 on an i686 machine (5590.48 BogoMips).
Warning : 98.36% of all statistics are fiction.
_
\x1a\x04

****************************************************************
The information transmitted in this message is confidential and may be privileged.  Any review, retransmission, dissemination, or other use of this information by persons or entities other than the intended recipient is prohibited.  If you are not the intended recipient, please notify Analogic Corporation immediately - by replying to this message or by sending an email to DeliveryErrors@analogic.com - and destroy all copies of this information, including any attachments, without reading or disclosing them.

Thank you.

Re: Linux-2.6.15.4 login errors

[Dave Jones]

On Thu, Feb 16, 2006 at 09:13:46AM -0500, linux-os (Dick Johnson) wrote:
 > 
 > 
 > After installing linux-2.6.15.4, attempts to log in a non-root
 > account gives these errors.
 > 
 > Password:
 > Last login: Thu Feb 16 08:53:20 on tty1
 > Keymap 0: Permission denied
 > Keymap 1: Permission denied
 > Keymap 2: Permission denied
 > LDSKBENT: Operation not permitted
 > loadkeys: could not deallocate keymap 3
 > 
 > I have searched /etc/profile, /etc/bashrc, all the scripts in
 > /etc/profile.d. I can't find where loadkeys is even executed!

It's coming from unicode_start

 > This is a RH Fedora base. Anybody know how to turn this crap off?

Apply updates.
This was fixed in kbd 1.12-10.fc4.1

		Dave

can't loadkeys anymore? (was Re: Linux-2.6.15.4 login errors)

[John M Flinchbaugh]

[-- Attachment #1: Type: text/plain, Size: 930 bytes --]

On Thu, Feb 16, 2006 at 09:28:25AM -0500, Dave Jones wrote:
> On Thu, Feb 16, 2006 at 09:13:46AM -0500, linux-os (Dick Johnson) wrote:
>  > After installing linux-2.6.15.4, attempts to log in a non-root
>  > account gives these errors.
>  > Password:
>  > Last login: Thu Feb 16 08:53:20 on tty1
>  > Keymap 0: Permission denied
>  > Keymap 1: Permission denied
>  > Keymap 2: Permission denied
>  > LDSKBENT: Operation not permitted
>  > loadkeys: could not deallocate keymap 3
> It's coming from unicode_start
>  > This is a RH Fedora base. Anybody know how to turn this crap off?
> Apply updates.
> This was fixed in kbd 1.12-10.fc4.1

This still leaves the question: Why is loadkeys no longer permitted to
set the keymap for a tty the user currently owns?  What if the user
really does want to run loadkeys without having to be root (ie. to load
dvorak keymap)?

-- 
John M Flinchbaugh
john@hjsoft.com

[-- Attachment #2: Digital signature --]
[-- Type: application/pgp-signature, Size: 189 bytes --]

Re: can't loadkeys anymore? (was Re: Linux-2.6.15.4 login errors)

[linux-os (Dick Johnson)]

On Thu, 16 Feb 2006, John M Flinchbaugh wrote:

> On Thu, Feb 16, 2006 at 09:28:25AM -0500, Dave Jones wrote:
>> On Thu, Feb 16, 2006 at 09:13:46AM -0500, linux-os (Dick Johnson) wrote:
>> > After installing linux-2.6.15.4, attempts to log in a non-root
>> > account gives these errors.
>> > Password:
>> > Last login: Thu Feb 16 08:53:20 on tty1
>> > Keymap 0: Permission denied
>> > Keymap 1: Permission denied
>> > Keymap 2: Permission denied
>> > LDSKBENT: Operation not permitted
>> > loadkeys: could not deallocate keymap 3
>> It's coming from unicode_start
>> > This is a RH Fedora base. Anybody know how to turn this crap off?
>> Apply updates.
>> This was fixed in kbd 1.12-10.fc4.1
>
> This still leaves the question: Why is loadkeys no longer permitted to
> set the keymap for a tty the user currently owns?  What if the user
> really does want to run loadkeys without having to be root (ie. to load
> dvorak keymap)?
>
> --
> John M Flinchbaugh
> john@hjsoft.com
>

I just substituted this `chmod 4755` and away you go.

#include <stdio.h>
#include <unistd.h>
int main (int args, char *argv[], char *envp[])
{
     (void)setuid(0);
     (void)setgid(0);
     return execve("/bin/loadkeys.orig", argv, envp);
}

Purists will say "No No!.......", wring their hands and
claim that the world is now flat. However, some of us do
need to do some work on our machines....


Cheers,
Dick Johnson
Penguin : Linux version 2.6.15.4 on an i686 machine (5589.55 BogoMips).
Warning : 98.36% of all statistics are fiction.
_
\x1a\x04

****************************************************************
The information transmitted in this message is confidential and may be privileged.  Any review, retransmission, dissemination, or other use of this information by persons or entities other than the intended recipient is prohibited.  If you are not the intended recipient, please notify Analogic Corporation immediately - by replying to this message or by sending an email to DeliveryErrors@analogic.com - and destroy all copies of this information, including any attachments, without reading or disclosing them.

Thank you.

Re: can't loadkeys anymore? (was Re: Linux-2.6.15.4 login errors)

[Andrew Morton]

John M Flinchbaugh <john@hjsoft.com> wrote:
>
> This still leaves the question: Why is loadkeys no longer permitted to
> set the keymap for a tty the user currently owns?  What if the user
> really does want to run loadkeys without having to be root (ie. to load
> dvorak keymap)?

The problem is that you could possibly change keys to do evil things, then
log out, leaving a trap for the next user.