Systemtap with no root required

David Smith dsmith@redhat.com
Mon Jul 16 18:42:00 GMT 2007


David Smith wrote:
> Frank Ch. Eigler wrote:
>> It'd be almost easier to see the code in situ.  Have you been
>> developing on a CVS branch?  It's not too late!
> 
> I hadn't thought of it.  It would be easy enough to do.

I've checked this code in on a branch, called 'setuid-branch'.  What's 
checked in works, but I do have a few things to change:

- I'm going to rework the module cmd file handling a bit to make it more 
secure

- Currently, the setuid program runs 5 external commands: the stp_check 
script, a kernel version check command, insmod, rmmod, and staprun_io 
itself.  I plan to work on converting everything (except staprun_io) to 
internal C code.

-- 
David Smith
dsmith@redhat.com
Red Hat
http://www.redhat.com
256.217.0141 (direct)
256.837.0057 (fax)



More information about the Systemtap mailing list