8 ms·

Use with caution. I was able to print my /etc/passwd file using /log/read.

• mhurron 13y ago
  That just means that this, like every performance dashboard, should be run internally and protected from the outside world.
• jahaja 13y ago
  Author here (and woha, didn't note that it was posted to HN. Explains the sudden github traffic.). Do you mean that you did that without actually passing /etc/passwd to as a --log arg to psdash? If so it's definitely a bug. The intent is to only allow viewing logs that was explicitly passed to psdash. And as mhurron said; it shouldn't really be public anyway.
• SEJeff 13y ago
  FYI: /etc/passwd is world readable. You get get the same info with the command: getent passwd Reading /etc/shadow is a real problem, /etc/passwd is really not a huge issue.
• arjie 13y ago
  I can do that with `cat`.