clipboard integration -- possible security implications

Steve Holmes steve at holmesgrown.com
Mon Nov 9 23:35:49 EST 2009


-----BEGIN PGP SIGNED MESSAGE-----
Hash: RIPEMD160

And to add to this suggestion, while in that same shell, you could
pipe the pasted contents into xclip in much the same way and then you
have it in the X clipboard also.  

I like the idea of the select group to hold all speakup settings.
This would improve security issues in general, I think.  I like the
concept of using /sys/accessibility/speakup/clip or whatever to hold a
file name that could then be used and owned by a specific user but I
also understand the downside to this as was pointed out earlier in
this thread.  

I wonder if tiing this business to virtual consoles wouldn't be a bad
idea.  I mean, think about it.  First off, speakup would never be used
by a remote user like over ssh; at least I can't imagine such a case.
As I think about it right now, I would think that could be an
excellent way to secure this aspect.  If the speakup cut/paste feature
is accessing the resource, any other users currently using the system
are mostlikely not on the virtual consoles and would probably have no
idea it was in use.

I think the big question is how to get this speakup buffer over to the
X clipboard.  Xclip is an excellent program to do the job but this
requires the shell AFAIK and the speakup clipboard could be piped into
xclip somehow.

On Sat, Oct 24, 2009 at 09:51:20AM -0500, Chris Brannon wrote:
> Tony Baechler <tony at baechler.net> wrote:
> > but I can think of cases where one would want a permanent 
> > copy in a file for use later.  Just one example might be in cases where 
> > the machine needs to be rebooted (like a kernel upgrade) and a command 
> > needs to be run after the reboot which was copied into the clipboard.  
> 
> Here's one way to do that.
> 
> * Make a selection.
> * Cut.
> * execute cat > stuff.txt
> * Paste.
> * Hit ctrl-d to indicate end-of-file.
> * Voila!
> 
> -- Chris
> _______________________________________________
> Speakup mailing list
> Speakup at braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)

iEYEAREDAAYFAkr47aUACgkQWSjv55S0LfFfiQCgi4ijXy5/nsABrMZJdG8alwbx
+H4An3lNYQHV0z45Sm9VNqOvC+y1ye+n
=xvMx
-----END PGP SIGNATURE-----



More information about the Speakup mailing list