Bug#754947: ITP: tiptop -- performance monitoring tool for Linux
On 16/07/14 11:11, Steve wrote:
> > Tiptop is a performance monitoring tool for Linux. It provides
> > a dynamic real-time view of the tasks running in the system.
> > Tiptop is very similar to the top utility, but most of the information
> > displayed comes from hardware counters.
>
> Note that if you want the -K/--kernel support to work the tool
> must be a) launched by root, or b) installed setuid(root).
>
> I'd strongly recommend against the latter as there are potential
> security issues.
>
> (The code tries to drop privileges for the "-o outfile" handling,
> for example, but does not do the same for the "-W error.file" handler.
> If the code is installed setuid(root) the user can overwrite any
> file on the system with ease.)
>
Hi Steve,
upstream "maek install" does not setuid tiptop. This is
how the Debian package works as well. See my RFS for more info:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754962
Tomasz
>
> Steve
> --
> http://www.steve.org.uk/
Reply to: