other
Note
- Location
server-health.sh:44- Finding
Excessive Disclosure of Privileged Host and OpenClaw Operational Metadata
- Content
View full analysis
1 {printf "%-12s %3d%% %5dMB\n", $11, int($3), int($6/1024)}' | head -3 } get_openclaw_pid() { pgrep -f "openclaw.*gateway" | head -1 || echo "" } get_openclaw_version() { # Get version from package.json instead of CLI (CLI can hang) if [[ -f /usr/lib/node_modules/openclaw/package.json ]]; then jq -r '.version // "unknown"' /usr/lib/node_modules/openclaw/package.json 2>/dev/null else echo "unknown" fi } get_openclaw_config() { if [[ -f /root/.openclaw/openclaw.json ]]; then local port=$(jq -r '.gateway.port // 18789' /root/.openclaw/openclaw.json 2>/dev/null) local model=$(jq -r '.agents.defaults.model.primary // "unknown"' /root/.openclaw/openclaw.json 2>/dev/null) local fallbacks=$(jq -r '.agents.defaults.model.fallbacks // [] | map(split("/")[1] // .) | join(" → ")' /root/.openclaw/openclaw.json 2>/dev/null) echo "${port} ${model} ${fallbacks}" else echo "18789 unknown " fi } get_docker_containers() { if command -v docker &>/dev/null; then docker ps -q 2>/dev/null | wc -l else echo "0" fi } ``` The standard output additionally exposes session metadata: ```bash # Simplified - just count session files local sessions=$(ls /root/.openclaw/agents/main/sessions/*.json 2>/dev/null | wc -l || echo "0") ``` ### Technical Analysis The script gathers system-wide process information, identifies the OpenClaw gateway process, reads package and configuration data, queries Docker, and counts session files under a root-owned directory. These operations are read-only and broadly align with the stated monitoring purpose. However, ...[truncated 2538 chars]- Remediation
View remediation