Abstract: A method and apparatus, operating within a kernel of a UNIX-based host computer, that ensures that no unauthorized users or processes have accessed a pseudo-terminal (pty) slave file within a pty device driver prior to an authorized process accessing the pty slave file. Specifically, upon receiving, from an application program, a request to open a pty master file to form a pty device driver, the request is granted by the kernel only if the pty master file and pty slave file are presently closed. Similarly, a request to open a pty slave file to form a pty device driver is granted by the kernel only if the pty master file is open and a user identification of an application attempting to open the slave file is identical to a user identification of the application program which opened the master file. In this manner, a pseudo-terminal link between the pty master file and the pty slave file is secure from unauthorized processes being surreptitiously connected to the pty slave.