Re: Systemtap with no root required

[David Smith <dsmith at redhat dot com>]

David Smith wrote:
> Frank Ch. Eigler wrote:
> > It'd be almost easier to see the code in situ.  Have you been
> > developing on a CVS branch?  It's not too late!
>
> I hadn't thought of it.  It would be easy enough to do.

I've checked this code in on a branch, called 'setuid-branch'.  What's 
checked in works, but I do have a few things to change:

- I'm going to rework the module cmd file handling a bit to make it more 
secure

- Currently, the setuid program runs 5 external commands: the stp_check 
script, a kernel version check command, insmod, rmmod, and staprun_io 
itself.  I plan to work on converting everything (except staprun_io) to 
internal C code.

--
David Smith
dsmith@redhat.com
Red Hat
http://www.redhat.com
256.217.0141 (direct)
256.837.0057 (fax)