This is the mail archive of the
systemtap@sourceware.org
mailing list for the systemtap project.
[Bug runtime/10984] New: restrict unprivileged mode operation to "stapusr" or similar
- From: "fche at redhat dot com" <sourceware-bugzilla at sourceware dot org>
- To: systemtap at sources dot redhat dot com
- Date: 19 Nov 2009 05:10:08 -0000
- Subject: [Bug runtime/10984] New: restrict unprivileged mode operation to "stapusr" or similar
- Reply-to: sourceware-bugzilla at sourceware dot org
Considering the potential size of the worm can, for an early
non-experimental deployment of unprivileged mode, let's allow
sysadmins to restrict staprun to run even signed code only for
some users.
If we don't wish to build an elaborate ACL setup (or even a
simple one like /etc/ftpusers), how about restricting
signed mode to only "stapusr" people. That way, two separate
actions are required by a local sysadmin: the approval of the
compilation environment, and approval of individual users.
Reuse of "staprun" as the groupid is probably plausible since
it's already a "lower privilege" sort of systemtap user, which
can only run precompiled stuff specifically installed under
/lib/modules/`uname -r`/systemtap. The proposal here is to
also permit such people to run --unprivileged scripts / signed
modules.
(Another option is to create a third user group, like "stapunpriv",
but I can't think of a good case for it as distinct from stapusr.)
--
Summary: restrict unprivileged mode operation to "stapusr" or
similar
Product: systemtap
Version: unspecified
Status: NEW
Severity: normal
Priority: P2
Component: runtime
AssignedTo: systemtap at sources dot redhat dot com
ReportedBy: fche at redhat dot com
OtherBugsDependingO 10907
nThis:
http://sourceware.org/bugzilla/show_bug.cgi?id=10984
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.