2009-04-22 Dave Brolley <brolley@redhat.com>

	* elaborate.h (unprivileged_whitelist): Removed.
	(unprivileged_ok): New member of match_node.
	(allow_unprivileged,unprivileged_allowed): New methods of match_node.

	* elaborate.cxx (match_node): Initialize unprivileged_ok. Remove
	initialization of unprivileged_whitelist.
	(allow_unprivileged,unprivileged_allowed): New methods of match_node.
	(matchnode::find_and_build): Remove check of unprivileged_whitelist.
	Call unprivileged_allowed.

	* tapsets.cxx (dwarf_derived_probe::register_function_and_statement_variants):
	New parameter: unprivileged_ok.
	(dwarf_derived_probe::register_function_variants): Likewise.
	(dwarf_derived_probe::register_statement_variants): Likeiwse.
	(register_standard_tapsets): Call allow_unprivileged for nodes which are
	safe for unprivileged users.

1 files changed, 57 insertions, 28 deletions

diff --git a/tapsets.cxx b/tapsets.cxx
index f99fbef4..deb9044c 100644
--- a/tapsets.cxx
+++ b/tapsets.cxx
@@ -2578,11 +2578,14 @@ struct dwarf_derived_probe: public derived_probe
 
   // Pattern registration helpers.
   static void register_statement_variants(match_node * root,
-					  dwarf_builder * dw);
+					  dwarf_builder * dw,
+					  bool unprivileged_ok = false);
   static void register_function_variants(match_node * root,
-					  dwarf_builder * dw);
+					 dwarf_builder * dw,
+					 bool unprivileged_ok = false);
   static void register_function_and_statement_variants(match_node * root,
-						       dwarf_builder * dw);
+						       dwarf_builder * dw,
+						       bool unprivileged_ok = false);
   static void register_patterns(systemtap_session& s);
 };
 
@@ -5499,25 +5502,28 @@ dwarf_derived_probe::dwarf_derived_probe(const string& funcname,
 
 void
 dwarf_derived_probe::register_statement_variants(match_node * root,
-						 dwarf_builder * dw)
+						 dwarf_builder * dw,
+						 bool unprivileged_ok)
 {
-  root->bind(dw);
+  root->allow_unprivileged(unprivileged_ok)->bind(dw);
 }
 
 void
 dwarf_derived_probe::register_function_variants(match_node * root,
-						dwarf_builder * dw)
+						dwarf_builder * dw,
+						bool unprivileged_ok)
 {
-  root->bind(dw);
-  root->bind(TOK_INLINE)->bind(dw);
-  root->bind(TOK_CALL)->bind(dw);
-  root->bind(TOK_RETURN)->bind(dw);
-  root->bind(TOK_RETURN)->bind_num(TOK_MAXACTIVE)->bind(dw);
+  root->allow_unprivileged(unprivileged_ok)->bind(dw);
+  root->bind(TOK_INLINE)->allow_unprivileged(unprivileged_ok)->bind(dw);
+  root->bind(TOK_CALL)->allow_unprivileged(unprivileged_ok)->bind(dw);
+  root->bind(TOK_RETURN)->allow_unprivileged(unprivileged_ok)->bind(dw);
+  root->bind(TOK_RETURN)->allow_unprivileged(unprivileged_ok)->bind_num(TOK_MAXACTIVE)->bind(dw);
 }
 
 void
 dwarf_derived_probe::register_function_and_statement_variants(match_node * root,
-							      dwarf_builder * dw)
+							      dwarf_builder * dw,
+							      bool unprivileged_ok)
 {
   // Here we match 4 forms:
   //
@@ -5526,10 +5532,10 @@ dwarf_derived_probe::register_function_and_statement_variants(match_node * root,
   // .statement("foo")
   // .statement(0xdeadbeef)
 
-  register_function_variants(root->bind_str(TOK_FUNCTION), dw);
-  register_function_variants(root->bind_num(TOK_FUNCTION), dw);
-  register_statement_variants(root->bind_str(TOK_STATEMENT), dw);
-  register_statement_variants(root->bind_num(TOK_STATEMENT), dw);
+  register_function_variants(root->bind_str(TOK_FUNCTION), dw, unprivileged_ok);
+  register_function_variants(root->bind_num(TOK_FUNCTION), dw, unprivileged_ok);
+  register_statement_variants(root->bind_str(TOK_STATEMENT), dw, unprivileged_ok);
+  register_statement_variants(root->bind_num(TOK_STATEMENT), dw, unprivileged_ok);
 }
 
 void
@@ -5545,11 +5551,10 @@ dwarf_derived_probe::register_patterns(systemtap_session& s)
   register_function_and_statement_variants(root->bind_str(TOK_MODULE), dw);
   root->bind(TOK_KERNEL)->bind_num(TOK_STATEMENT)->bind(TOK_ABSOLUTE)->bind(dw);
   root->bind(TOK_KERNEL)->bind_str(TOK_FUNCTION)->bind_str(TOK_LABEL)->bind(dw);
-  root->bind_str(TOK_PROCESS)->bind_str(TOK_FUNCTION)->bind_str(TOK_LABEL)->bind(dw);
-
-  register_function_and_statement_variants(root->bind_str(TOK_PROCESS), dw);
-  root->bind_str(TOK_PROCESS)->bind_str(TOK_MARK)->bind(dw);
-  root->bind_str(TOK_PROCESS)->bind_num(TOK_MARK)->bind(dw);
+  root->bind_str(TOK_PROCESS)->bind_str(TOK_FUNCTION)->bind_str(TOK_LABEL)->allow_unprivileged()->bind(dw);
+  register_function_and_statement_variants(root->bind_str(TOK_PROCESS), dw, true/*unprivileged_ok*/);
+  root->bind_str(TOK_PROCESS)->bind_str(TOK_MARK)->allow_unprivileged()->bind(dw);
+  root->bind_str(TOK_PROCESS)->bind_num(TOK_MARK)->allow_unprivileged()->bind(dw);
 }
 
 void
@@ -11758,14 +11763,14 @@ perfmon_derived_probe_group::emit_module_init (translator_output* o)
 void
 register_standard_tapsets(systemtap_session & s)
 {
-  s.pattern_root->bind(TOK_BEGIN)->bind(new be_builder(BEGIN));
-  s.pattern_root->bind_num(TOK_BEGIN)->bind(new be_builder(BEGIN));
-  s.pattern_root->bind(TOK_END)->bind(new be_builder(END));
-  s.pattern_root->bind_num(TOK_END)->bind(new be_builder(END));
-  s.pattern_root->bind(TOK_ERROR)->bind(new be_builder(ERROR));
-  s.pattern_root->bind_num(TOK_ERROR)->bind(new be_builder(ERROR));
+  s.pattern_root->bind(TOK_BEGIN)->allow_unprivileged()->bind(new be_builder(BEGIN));
+  s.pattern_root->bind_num(TOK_BEGIN)->allow_unprivileged()->bind(new be_builder(BEGIN));
+  s.pattern_root->bind(TOK_END)->allow_unprivileged()->bind(new be_builder(END));
+  s.pattern_root->bind_num(TOK_END)->allow_unprivileged()->bind(new be_builder(END));
+  s.pattern_root->bind(TOK_ERROR)->allow_unprivileged()->bind(new be_builder(ERROR));
+  s.pattern_root->bind_num(TOK_ERROR)->allow_unprivileged()->bind(new be_builder(ERROR));
 
-  s.pattern_root->bind(TOK_NEVER)->bind(new never_builder());
+  s.pattern_root->bind(TOK_NEVER)->allow_unprivileged()->bind(new never_builder());
 
   timer_builder::register_patterns(s);
   s.pattern_root->bind(TOK_TIMER)->bind("profile")->bind(new profile_builder());
@@ -11778,57 +11783,81 @@ register_standard_tapsets(systemtap_session & s)
   // XXX: user-space starter set
   s.pattern_root->bind_num(TOK_PROCESS)
     ->bind_num(TOK_STATEMENT)->bind(TOK_ABSOLUTE)
+    ->allow_unprivileged()
     ->bind(new uprobe_builder ());
   s.pattern_root->bind_num(TOK_PROCESS)
     ->bind_num(TOK_STATEMENT)->bind(TOK_ABSOLUTE)->bind(TOK_RETURN)
+    ->allow_unprivileged()
     ->bind(new uprobe_builder ());
 
   // utrace user-space probes
   s.pattern_root->bind_str(TOK_PROCESS)->bind(TOK_BEGIN)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind_num(TOK_PROCESS)->bind(TOK_BEGIN)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind(TOK_PROCESS)->bind(TOK_BEGIN)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind_str(TOK_PROCESS)->bind(TOK_END)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind_num(TOK_PROCESS)->bind(TOK_END)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind(TOK_PROCESS)->bind(TOK_END)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind_str(TOK_PROCESS)->bind(TOK_THREAD)->bind(TOK_BEGIN)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind_num(TOK_PROCESS)->bind(TOK_THREAD)->bind(TOK_BEGIN)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind(TOK_PROCESS)->bind(TOK_THREAD)->bind(TOK_BEGIN)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind_str(TOK_PROCESS)->bind(TOK_THREAD)->bind(TOK_END)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind_num(TOK_PROCESS)->bind(TOK_THREAD)->bind(TOK_END)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind(TOK_PROCESS)->bind(TOK_THREAD)->bind(TOK_END)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind_str(TOK_PROCESS)->bind(TOK_SYSCALL)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind_num(TOK_PROCESS)->bind(TOK_SYSCALL)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind(TOK_PROCESS)->bind(TOK_SYSCALL)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind_str(TOK_PROCESS)->bind(TOK_SYSCALL)->bind(TOK_RETURN)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind_num(TOK_PROCESS)->bind(TOK_SYSCALL)->bind(TOK_RETURN)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
   s.pattern_root->bind(TOK_PROCESS)->bind(TOK_SYSCALL)->bind(TOK_RETURN)
+    ->allow_unprivileged()
     ->bind(new utrace_builder ());
 
   // itrace user-space probes
   s.pattern_root->bind_str(TOK_PROCESS)->bind(TOK_INSN)
+    ->allow_unprivileged()
     ->bind(new itrace_builder ());
   s.pattern_root->bind_num(TOK_PROCESS)->bind(TOK_INSN)
+    ->allow_unprivileged()
     ->bind(new itrace_builder ());
   s.pattern_root->bind_str(TOK_PROCESS)->bind(TOK_INSN)->bind(TOK_BLOCK)
+    ->allow_unprivileged()
     ->bind(new itrace_builder ());
   s.pattern_root->bind_num(TOK_PROCESS)->bind(TOK_INSN)->bind(TOK_BLOCK)
+    ->allow_unprivileged()
     ->bind(new itrace_builder ());
 
   // marker-based parts