Date: Thu, 6 Jan 2005 21:04:12 +0100 From: Anthony Atkielski <atkielski.anthony@wanadoo.fr> To: freebsd-questions@freebsd.org Subject: Re: Running top on system console without being logged on Message-ID: <659027645.20050106210412@wanadoo.fr> In-Reply-To: <015301c4f3e8$58464920$92a7cb52@rekon> References: <1761142680.20050104050725@wanadoo.fr> <040201c4f372$06d09210$92a7cb52@rekon> <1507832106.20050106024812@wanadoo.fr> <015301c4f3e8$58464920$92a7cb52@rekon>
next in thread | previous in thread | raw e-mail | index | archive | help
Reko Turja writes: RT> Actually not command line options as such, but you can make a login RT> class for the top user in /etc/login.conf and feed the options via TOP RT> environment variable from there. RT> RT> You cant shell out from top and renicing from non root account is RT> impossible (except dropping the niceness of your own process). I think RT> the approach is secure enough and if you give "topper" good enough RT> password or deny logon from anywhere except from console, everything RT> should be ok. Of course if the terminal is accessible to others than RT> administrative staff, giving out the usernames can be a risk, but you RT> can use the usernumbers option to avoid giving out the usernames. RT> RT> Did myself something very similar with a IPless firewall between a while RT> back but I ran vmstat in the console instead. Good one glance monitoring RT> without the need of logging on the machine itself. I created a special user that logs directly into top. I don't run telnet or anything so login isn't possible from anywhere else, and it's a plain user account with a good password. It seems to work pretty well. -- Anthony
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?659027645.20050106210412>