diff options
| author | Costa Tsaousis (ktsaou) <costa@tsaousis.gr> | 2018-04-17 22:31:31 +0300 |
|---|---|---|
| committer | Costa Tsaousis (ktsaou) <costa@tsaousis.gr> | 2018-04-17 22:31:31 +0300 |
| commit | 8463380cd1f2bcd25c38a2c401207ede4ff65486 (patch) | |
| tree | 312c311b530cd4763f65d1096e4dfc85258a1a8c /netdata-installer.sh | |
| parent | b6b2812eee2b70e2fe25134e8dac54242603b74f (diff) | |
fix apps.plugin security issues identified by Synacktiv
Diffstat (limited to 'netdata-installer.sh')
| -rwxr-xr-x | netdata-installer.sh | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/netdata-installer.sh b/netdata-installer.sh index 8d875629b8..dd981da7fc 100755 --- a/netdata-installer.sh +++ b/netdata-installer.sh @@ -991,8 +991,8 @@ To run apps.plugin with escalated capabilities: or, to run apps.plugin as root: - ${TPUT_YELLOW}${TPUT_BOLD}sudo chown root \"${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/apps.plugin\"${TPUT_RESET} - ${TPUT_YELLOW}${TPUT_BOLD}sudo chmod 4755 \"${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/apps.plugin\"${TPUT_RESET} + ${TPUT_YELLOW}${TPUT_BOLD}sudo chown root:${NETDATA_GROUP} \"${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/apps.plugin\"${TPUT_RESET} + ${TPUT_YELLOW}${TPUT_BOLD}sudo chmod 4750 \"${NETDATA_PREFIX}/usr/libexec/netdata/plugins.d/apps.plugin\"${TPUT_RESET} apps.plugin is performing a hard-coded function of data collection for all running processes. It cannot be instructed from the netdata daemon to perform |