This is the mail archive of the systemtap@sourceware.org mailing list for the systemtap project.

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]
Other format:	[Raw text]

Re: Systemtap with no root required

From: David Smith <dsmith at redhat dot com>
To: "Frank Ch. Eigler" <fche at redhat dot com>
Cc: Systemtap List <systemtap at sources dot redhat dot com>
Date: Fri, 13 Jul 2007 13:27:37 -0500
Subject: Re: Systemtap with no root required
References: <469771AD.4050209@redhat.com> <y0mmyy0dxbg.fsf@ton.toronto.redhat.com>

Frank Ch. Eigler wrote:

David Smith <dsmith@redhat.com> writes:

Here's the latest on being able to run systemtap without root
privileges required.

Thanks!

Here's a description of the current plan.  There are 2 linux groups
(feel free to suggest better names):
"stapdev" - Systemtap developer, who can do anything with systemtap


This corresponds to the sudo empowerment whose support was removed as
a part of this patch.  (One can still run "sudo stap ...", and the
code treats one as an stapdev.)

Oops, I forgot to mention this. Yes, the 'root' user is treated as a member of 'stapdev' even if he is not. So, root can do anything with systemtap he wants.

I've attached a compressed patch which implements the above. [...]
It'd be almost easier to see the code in situ.  Have you been
developing on a CVS branch?  It's not too late!

I hadn't thought of it. It would be easy enough to do.

--
David Smith
dsmith@redhat.com
Red Hat
http://www.redhat.com
256.217.0141 (direct)
256.837.0057 (fax)

Follow-Ups:
- Re: Systemtap with no root required
  - From: David Smith

References:
- Systemtap with no root required
  - From: David Smith
- Re: Systemtap with no root required
  - From: Frank Ch. Eigler

Index Nav:	[Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav:	[Date Prev] [Date Next]	[Thread Prev] [Thread Next]