boot chart hidden upload ?!

Marius Gedminas marius at pov.lt
Thu Oct 11 11:37:38 UTC 2007


On Thu, Oct 11, 2007 at 12:40:38AM +0100, (``-_-ยดยด) -- Fernando wrote:
> On Monday 08 October 2007 19:23:37 sktsee wrote:
> > On Mon, 2007-10-08 at 11:16 +0100, (=?utf-8?q?=60=60-=5F-=C2=B4=C2=B4?=)
> > -- Fernando wrote:
> > > Hi there.
> > > I've installed bootchart, and I have to say its nice to see where our computer uses it time, while booting.
> > > Nevertheless, while looking at the code of /etc/init.d/stop-bootchart, I saw this piece of code:
> > > 
> > > upload_chart()
> > > {
> > >     for item in $(cat /proc/cmdline); do
> > >         case $item in
> > >             bootchart=*)
> > >                 boottype=$(echo "$item" | awk -F, '{print $2}')
> > >                 ;;
> > >         esac
> > >     done
> > >     wget -O /dev/null -q --post-file $CHARTS/$base-$count.png http://bootchart.err.no/upload/$(lsb_release -si)/$(lsb_release -sc)/$(uname -r)/$(uname -m)/$boottype
> > > }
> > > 
> > > Does this mean, that this apps, tries to upload our private results to a server without our knowledge?
> > > 
> > 
> > No. It only uploads your data if you specify bootchart=upload on the commandline (in grub)
> 
> Wha makes you so sure?

We know shell.  The code quoted defines a function to upload bootcharts.
The only place where that function is invoked is this:

        grep -q bootchart=upload /proc/cmdline && upload_chart

Marius Gedminas
-- 
Always proofread carefully to see if you any words out.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-users/attachments/20071011/c8a739a7/attachment.sig>


More information about the ubuntu-users mailing list