[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#754947: ITP: tiptop -- performance monitoring tool for Linux



On 16/07/14 11:11, Steve wrote:
> > Tiptop is a performance monitoring tool for Linux. It provides
> > a dynamic real-time view of the tasks running in the system.
> > Tiptop is very similar to the top utility, but most of the information
> > displayed comes from hardware counters.
> 
>   Note that if you want the -K/--kernel support to work the tool
>  must be a) launched by root, or b) installed setuid(root).
> 
>   I'd strongly recommend against the latter as there are potential
>  security issues.
> 
>   (The code tries to drop privileges for the "-o outfile" handling,
>  for example, but does not do the same for the "-W error.file" handler.
>  If the code is installed setuid(root) the user can overwrite any
>  file on the system with ease.)
> 

Hi Steve,
upstream "maek install" does not setuid tiptop. This is 
how the Debian package works as well. See my RFS for more info:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754962

Tomasz

> 
> Steve
> -- 
> http://www.steve.org.uk/


Reply to: