[4317] in testers
pmcd leaks lots of information
daemon@ATHENA.MIT.EDU (Nathan J. Williams)
Tue Jul 20 11:05:19 1999
To: testers@MIT.EDU
From: nathanw@MIT.EDU (Nathan J. Williams)
Date: 20 Jul 1999 11:05:04 -0400
Message-Id: <mtuogh7jra7.fsf@buzzword-bingo.mit.edu>
In a recent round of "What is all this crap that runs on
SGIs?" I discovered that the Athena 6.5 SGIs run a daemon called
'pmcd', the "performance metrics collector daemon". A little SGI
client program called pminfo will talk to another machine and get lots
of information, some of which we might not want exposed, such as the
process table.
For example, I can run:
39 opus:nathanw>pminfo -F -h m37-312-38 proc.psinfo
and get basically everything out of the process table.
There's probably other information in the pminfo output that we want
tighter control over; if we really want to export it, we have
athinfod.
The pmcd program should probably be disabled.
- Nathan
