ffmpeg can record the display of any user

[Anon]

I forwarded the email, the above suggestion.

I think that if is a problem that must be solved

example
ffmpeg -f x11grab -r 30 -sameq -s 854x480 -i :0.0 archivo.avi

I created a user with limited privileges and can still be recording the
display of root or another user.

- Anon



---------- Forwarded message ----------
From: Remko Lodder <remko at elvandar.org>
Date: Mon, Feb 1, 2010 at 7:20 PM
Subject: Re: ffmpeg can record the display of any user
To: Anon <anon at elhacker.net>
Cc: secteam at freebsd.org



On Feb 1, 2010, at 5:49 PM, Anon wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I do not know where the problem, however any user can record the
> display using ffmpeg
>
> example:
> ffmpeg -f x11grab -r 30 -sameq -s 854x480 -i :0.0 archivo.avi
>
> I created a user with limited privileges and can still be recording
> the display of root or another user.
>


Dear Anon,

We have received your message. However I do not feel this is a security
issue
within FreeBSD. X, where the display is being set, is reponsible for sharing
the
desktop etc. ffmpeg is an additional third party port that has access to
this.

It might be best to ask around on the ports@ mailinglist or even x11@ (might
be better now that I think of it) on how to tune down display access from
local users.

Cheers and thanks for trying to help and make FreeBSD better, it's
appreciated!

--
/"\   Best regards,                        | remko at FreeBSD.org
\ /   Remko Lodder                      | remko at EFnet
X    http://www.evilcoder.org/    |
/ \   ASCII Ribbon Campaign    | Against HTML Mail and News