Backport upstream commit 78d5ae119742e87baa7dbe0f5c4107e7533fd698
to fix CVE-2026-72693 in openvt's -u option. The patch makes
process matching more conservative by using controlling terminal
matching via /proc/<pid>/stat instead of file descriptor stat
checking, adds rejection of root as a pre-authenticated user,
and documents the tighter -u behavior in the man page.
CVE: CVE-2026-72693
Upstream patches:
- 78d5ae1197.patch
Resolves: RHEL-235979
This commit was backported by Ymir, a Red Hat Enterprise Linux software maintenance AI agent.
Assisted-by: Ymir
