Local privilege escalation via controlling-terminal ioctl injection

Privilege escalation in Ed Neville Please 0.5.4 and earlier allows local users to execute commands as a more privileged delegated user. The please command runs delegated programs on the caller's controlling terminal, allowing a child process to inject keystrokes with TIOCSTI or TIOCLINUX for the parent shell to execute. The attack requires permission to run a crafted command and a Linux system where at least one ioctl remains enabled; when both are disabled, the attack is blocked.