On 16/07/14 11:11, Steve wrote:
> > Tiptop is a performance monitoring tool for Linux. It provides
> > a dynamic real-time view of the tasks running in the system.
> > Tiptop is very similar to the top utility, but most of the information
> > displayed comes from hardware counters.
> 
>   Note that if you want the -K/--kernel support to work the tool
>  must be a) launched by root, or b) installed setuid(root).
> 
>   I'd strongly recommend against the latter as there are potential
>  security issues.
> 
>   (The code tries to drop privileges for the "-o outfile" handling,
>  for example, but does not do the same for the "-W error.file" handler.
>  If the code is installed setuid(root) the user can overwrite any
>  file on the system with ease.)
> 

Hi Steve,
upstream "maek install" does not setuid tiptop. This is 
how the Debian package works as well. See my RFS for more info:
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=754962

Tomasz

> 
> Steve
> -- 
> http://www.steve.org.uk/


-- 
To UNSUBSCRIBE, email to debian-wnpp-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org
Archive: https://lists.debian.org/20140716115151.ga25...@buchert.pl

Reply via email to