iftop-users January 2010

iftop-users@domain

5 participants
2 discussions

[Iftop-users] iftop packet parsing code
by Rob Hasselbaum 22 Jan '10

22 Jan '10

Hello. I'm working on a tool similar to iftop that will run as a KDE desktop widget. I'm interested in incorporating some of the packet parsing code from iftop, since it basically does what I need and I've been unable to find a standalone library. So my questions are do you have any objections to this? And if not, how would you like your work to be attributed? Note that I plan to release the tool as GPL v3. Thanks for your time, -Rob

1 0

[Iftop-users] Security Issue With iftop
by Ali Jawad 20 Jan '10

20 Jan '10

Hi All As you all know a non root user can not run iftop. So the most obvious workaround is to use sudo. Now if you give a regular user sudo access he will execute. sudo iftop Once he is inside iftop. He can execute ! he will get the following promtp command > At this point a user can execute su, and he will get a root shell. He can also execute any command in privileged mode. The idea of using sudo initially was giving the user iftop access. However the user ends up with total root access. Please comment. Regards

4 9

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

iftop-users January 2010