Psdash: A linux system information web dashboard using Psutils and Flask

Re:Psdash: A linux system information web dashboard using Ps... by nathancahill on Sunday March 30, 2014 @01:00PM (#7496843)

Use with caution. I was able to print my /etc/passwd file using /log/read.

[ Parent | on HN ]

Re:Psdash: A linux system information web dashboard using Ps... by SEJeff on Sunday March 30, 2014 @06:10PM (#7498180)

FYI: /etc/passwd is world readable. You get get the same info with the command:

getent passwd

Reading /etc/shadow is a real problem, /etc/passwd is really not a huge issue.

[ Parent | on HN ]

Re:Psdash: A linux system information web dashboard using Ps... by jahaja on Sunday March 30, 2014 @04:17PM (#7497736)

Author here (and woha, didn't note that it was posted to HN. Explains the sudden github traffic.).

Do you mean that you did that without actually passing /etc/passwd to as a --log arg to psdash? If so it's definitely a bug. The intent is to only allow viewing logs that was explicitly passed to psdash.

And as mhurron said; it shouldn't really be public anyway.

[ Parent | on HN ]

Re:Psdash: A linux system information web dashboard using Ps... by mhurron on Sunday March 30, 2014 @02:15PM (#7497166)

That just means that this, like every performance dashboard, should be run internally and protected from the outside world.

[ Parent | on HN ]

Re:Psdash: A linux system information web dashboard using Ps... by arjie on Sunday March 30, 2014 @09:01PM (#7498851)

I can do that with `cat`.

[ Parent | on HN ]