This is the mail archive of the systemtap@sourceware.org mailing list for the systemtap project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

Re: FW: Re: pre-compiled systemtap modules - try2 feature request


Hi, David -

> > We are aware of this need, and work is in progress as we speak to
> > promote this style of usage.  Do you have any suggestions about what
> > form the "blessings" might have?
> 
> For the next couple of years the security blessing is fairly simple. The
> user cannot have root access to the file system, capture or read other users
> passwords, impersonate another user, or bypass kernel auditing.  [...]

What I meant to ask was whether you had any thoughts about how such
blessing (permission to run some particular systemtap script) might be
encoded into software.

- FChE

Attachment: pgp00000.pgp
Description: PGP signature


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]