On 16/07/14 11:11, Steve wrote: > > Tiptop is a performance monitoring tool for Linux. It provides > > a dynamic real-time view of the tasks running in the system. > > Tiptop is very similar to the top utility, but most of the information > > displayed comes from hardware counters. > > Note that if you want the -K/--kernel support to work the tool > must be a) launched by root, or b) installed setuid(root). > > I'd strongly recommend against the latter as there are potential > security issues. > > (The code tries to drop privileges for the "-o outfile" handling, > for example, but does not do the same for the "-W error.file" handler. > If the code is installed setuid(root) the user can overwrite any > file on the system with ease.) >
Hi Steve, upstream "maek install" does not setuid tiptop. This is how the Debian package works as well. See my RFS for more info: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754962 Tomasz > > Steve > -- > http://www.steve.org.uk/ -- To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org Archive: https://lists.debian.org/20140716115151.ga25...@buchert.pl