This is the mail archive of the systemtap@sourceware.org mailing list for the systemtap project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

[Bug runtime/15193] assigned_user_credentials = pr_stapdev


http://sourceware.org/bugzilla/show_bug.cgi?id=15193

Dave Brolley <brolley at redhat dot com> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |ASSIGNED
                 CC|                            |brolley at redhat dot com
         AssignedTo|systemtap at sourceware dot |brolley at redhat dot com
                   |org                         |

--- Comment #2 from Dave Brolley <brolley at redhat dot com> 2013-02-28 19:26:07 UTC ---
staprun was actually loading the module, but it passed a user privilege level
of pr_stapdev to the module as the user's privilege level. Since pr_stapdev
does not contain pr_stapsys, the module's self checking code determined that
the user did not have sufficient privileges to run it, and so it aborted.

staprun should have passed a privilege level of pr_all to the module, ensuring
that all modules within the special directory can be run by all users. More
accurately, the user must at a minimum be a member of stapusr, since staprun
itself can only be run by root or members of that group.

commit 019e44d6bf7137af289412f35f28be5938acfb62 implements this fix.

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]