This is the mail archive of the systemtap@sourceware.org mailing list for the systemtap project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

[Bug runtime/6903] scripts can be run by non-sudo and non-stapdev users


------- Additional Comments From dsmith at redhat dot com  2008-09-18 20:13 -------
Assuming I ran "git bisect" correctly, the following commits are when this
behaviour started:

6fa7bd6e70f8f6d783395399c92a9a13d24ce997
337cd273963410c9a1fa46b10287e72c146df054

(There are 2 commits since the tree doesn't compile after the first commit.)

Here are the log entries from those commits:

Author: Frank Ch. Eigler <fche@elastic.org>
Date:   Fri Sep 5 13:02:37 2008 -0400

    remove capability logic
    
    It was only barely beneficial anyway, since some crucial
    capabilities were never permanently dropped.

Author: Frank Ch. Eigler <fche@elastic.org>
Date:   Fri Sep 5 13:02:56 2008 -0400

    remove capabilities logic, cont'd

Now to figure out why removing the capability logic allows anyone to run
systemtap...

-- 


http://sourceware.org/bugzilla/show_bug.cgi?id=6903

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]