summaryrefslogtreecommitdiffstats
path: root/runtime/staprun
Commit message (Collapse)AuthorAgeFilesLines
...
* | | Merge branch 'master' of git://sources.redhat.com/git/systemtapDave Brolley2009-05-061-1/+1
|\| |
| * | Problems using server scripts when not on PATH.Dave Brolley2009-05-061-1/+1
| | | | | | | | | | | | HAVE_NSS related compile time warning.
* | | Merge branch 'master' of git://sources.redhat.com/git/systemtapDave Brolley2009-05-052-0/+3
|\| |
| * | Add Vim modelines for new C/C++ sourcesJosh Stone2009-05-052-0/+3
| | |
* | | Merge branch 'master' of git://sources.redhat.com/git/systemtapDave Brolley2009-05-052-3/+170
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: modsign.cxx runtime/staprun/modverify.c runtime/staprun/staprun_funcs.c stap-authorize-server-cert stap-authorize-signing-cert stap-serverd systemtap.spec
| * | Module signing and verification using a separate file for the module signature.Dave Brolley2009-05-044-69/+532
| | |
* | | Merge branch 'master' of git://sources.redhat.com/git/systemtapDave Brolley2009-04-231-105/+7
|\| | | | | | | | | | | | | | | | | Conflicts: Makefile.in
| * | PR 9821: Use genuine strftime in staprun/stapioMasami Hiramatsu2009-04-221-105/+7
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Makefile.am: Add -fno-builtin-strftime to stapio_CFLAGS. * Makefile.in: Ditto. * runtime/staprun/common.c (stap_strfloctime): Use strftime(3). (parse_args): Remove strftime format limitation message. * main.cxx (usage): Ditto. * stap.1.in: Ditto. * staprun.8.in: Ditto.
* | | 2009-04-14 Dave Brolley <brolley@redhat.com>Dave Brolley2009-04-146-32/+65
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * translate.cxx (c_unparser::emit_unprivileged_user_check): Generate code to check _stp_unprivileged_user. * testsuite/lib/systemtap.exp (setup_server): Copy stap-env to $net_path. * runtime/transport/transport.c: Set up _stp_unprivileged_user. * runtime/staprun/staprun_funcs.c (check_signature): Distiguish among verification failure due to errors, tampering, untrusted signer. (check_permissions): Likewise. (check_groups): Set unprivileged_user. * runtime/staprun/staprun.c (insert_stap_module): Set _stp_unprivileged_user. * runtime/staprun/modverify.h (MODULE_OK): #define it. (MODULE_UNTRUSTED,MODULE_CHECK_ERROR,MODULE_ALTERED): Likewise. * runtime/staprun/modverify.c (modverify.h): #include it. (verify_it): Distiguish among verification failure due to errors, tampering, untrusted signer. (verify_module): Likewise. * runtime/staprun/common.c (unprivileged_user): Define it. * runtime/staprun/staprun.h (unprivileged_user): Declare it. * cache.cxx (get_from_cache): Get the module signature file. * stap-authorize-server-cert: Source `dirname $0`/stap-env. * stap-authorize-signing-cert: Likewise. * stap-client: Likewise. * stap-find-or-start-server: Likewise. * stap-find-servers: Likewise. * stap-gen-cert: Likewise. * stap-server: Likewise. * stap-serverd: Likewise. * stap-start-server: Likewise.
* | | Merge branch 'master' of git://sources.redhat.com/git/systemtapDave Brolley2009-04-062-10/+25
|\| |
| * | PR10032: Trigger cleanup after relay thread errorsJosh Stone2009-04-032-10/+25
| | | | | | | | | | | | | | | | | | When the relay threads encounter an error, they now send SIGTERM to the rest of the process before the thread exit, so we get a clean shutdown. For EPIPE in particular, error messages are also suppressed.
* | | Merge branch 'master' of git://sources.redhat.com/git/systemtapDave Brolley2009-04-033-6/+9
|\| | | | | | | | | | | | | | | | | | | | Conflicts: configure runtime/staprun/staprun_funcs.c
| * | Really fix run-stap this time, I promise!Josh Stone2009-04-021-1/+14
| | |
| * | Fix strftime format bugMasami Hiramatsu2009-04-021-3/+6
| | | | | | | | | | | | | | | This fixes bugs in strftime-subset function. This modifies %C, %l and %j to fit the output of date command.
| * | Fix a bug in file size limitation code.Masami Hiramatsu2009-04-022-3/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | This fixes a bug in stapio, which checks written data size and switches new file when it exceeds a limit. The problem is that written-data-size counter ignores the first written-data size when switching files. So, actual file size always exceeds the limit. This changes stapio to initialize written-data-size counter with the size of the data which will be written in new file.
* | | Merge branch 'master' of git://sources.redhat.com/git/systemtapDave Brolley2009-03-301-1/+4
|\| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Conflicts: aclocal.m4 configure testsuite/aclocal.m4 Also: 2009-03-30 Dave Brolley <brolley@redhat.com> * nsscommon.c (nssError): Handle SEC_ERROR_BAD_SIGNATURE. 2009-03-30 Dave Brolley <brolley@redhat.com> * modverify.c (verify_it): Print a message if the module may have been tampered with.
* | | Merge branch 'master' of git://sources.redhat.com/git/systemtapDave Brolley2009-03-251-0/+9
|\| | | | | | | | | | | | | | | | | Conflicts: Makefile.in
| * | Fix for CVE-2009-0784: stapusr module-path checking raceFrank Ch. Eigler2009-03-251-0/+9
| | | | | | | | | | | | | | | * runtime/staprun/staprun_funcs.c (check_path): Save fully canonicalized and checked module path for later loading.
* | | Merge branch 'master' of git://sources.redhat.com/git/systemtapDave Brolley2009-03-235-37/+520
|\| |
| * | PR9821: staprun supports subset of strftime.Masami Hiramatsu2009-03-204-32/+232
| | | | | | | | | | | | | | | Add strftime subset format support for output file name to systemtap. This format will be evaluated when opening a new output file.
| * | PR6930: stapio: support file switchingMasami Hiramatsu2009-03-205-17/+195
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Add file-switching option(-S size[,N]) to stapio. This option has two arguments, 'size' and 'N', and requires -o option. - When the size of output file exceeds specified 'size'MB, staprun switches output file to the next file. For this purpose, all output file has a serial number as a suffix only when user specifies this option. - Using this option in bulk mode, the output file name will be 'FILE_cpuX.SERIAL'. - When the number of files exceeds specified N, staprun removes the oldest file. This argument can be omitted.
| * | PR6930: stapio: run in background as a daemonMasami Hiramatsu2009-03-203-4/+84
| | | | | | | | | | | | | | | | | | | | | Add '-D'(daemon mode) option to staprun/stapio for daemon mode. In this mode, stapio shows just its pid and detachs from console. Since it has no stdio, this mode requires -o option. stapio will exit when it receives SIGTERM or detects some error.
| * | PR6930: staprun: supports error message to syslogMasami Hiramatsu2009-03-203-8/+33
| | | | | | | | | | | | | | | Add an interface (eprintf) to output error messages to syslogd, because staprun has no stderr after detaching from console.
* | | Merge branch 'master' of git://sources.redhat.com/git/systemtapDave Brolley2009-03-161-0/+8
|\| |
| * | PR9947: move runtime cleanup out of the work queueJosh Stone2009-03-131-0/+8
| |/ | | | | | | | | | | | | | | | | | | | | | | The kernel lockdep checking found a possible deadlock if a forced rmmod tried to destroy _stp_work_queue at the same time that the work queue was unregistering tracepoints. An unlikely scenario, but still possible. Now the work queue will just issue a STP_REQUEST_EXIT down to usermode, and usermode will echo back an STP_EXIT that triggers the actual probe cleanup. This way the unregistrations are happening in exactly the same context as the registrations were.
* / 2009-03-12 Dave Brolley <brolley@redhat.com>Dave Brolley2009-03-124-55/+357
|/ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * util.cxx (remove_file_or_dir): New function. * util.h (remove_file_or_dir): New function. * systemtap.spec (stap): Add stap-env, stap-gen-cert, stap-authorize-cert, and stap-authorize-signing-cert. (stap-client): Remove stap-find-or-start-server, stap-add-server-cert. Add stap-authorize-server-cert. (stap-server): Add stap-find-servers, stap-find-or-start-server, stap-authorize-server-cert. Remove stap-gen-server-cert. * stap-find-servers: Source stap-env. Use $stap_avahi_service_tag. (initialization): Set timeout to 10. (find_servers): Run avahi-browse in the background and wait for it. Use a temp file for the output of avahi-browse. Kill avahi-browse if the timeout expires. (match_server): Set read timeout. (fatal): New function. * stap-find-or-start-server: Source stap-env. Use $stap_exec_prefix. Always exit with 0. * stap-start-server: Source stap-env. Check for the server PID as a running process and for avahi-publish-service running as a child in order to verify that the server is ready. * stap-add-server-cert: Renamed to stap-authorize-server-cert. Source stap-env. Call stap-authorize-cert. * stap-client: Source stap-env. Use $stap_user_ssl_db and $stap_root_ssl_db. Use $stap_tmpdir_prefix_client, $stap_tmpdir_prefix_server. Use $stap_exec_prefix. (configuration): Removed. (staprun_running): Removed. (interrupt): Don't kill staprun. * stap-server: Source stap-env. Use $stap_user_ssl_db and $stap_root_ssl_db. Use $stap_tmpdir_prefix_client, $stap_tmpdir_prefix_server. Use $stap_exec_prefix. (configuration): Removed. * session.h (systemtap_session): Add cert_db_path. * runtime/staprun/staprun_funcs.c (config.h): #include it. (modverify.h): #include it. (check_signature): New function. (check_groups): New function extracted from check_permissions. (check_permissions): Call check_groups and check_signature. * runtime/staprun/mainloop.c (cleanup_and_exit): Pass modpath to staprun, not modname. * main.cxx (main): Initialize cert_db_path. Handle LONG_OPT_SIGN_MODULE. Save the module signature if the module was signed and is being saved. (LONG_OPT_SIGN_MODULE): #define it. (long_options): Add --sign-module. * cache.cxx (config.h): #include it. (add_to_cache): Add the module signature file to the cache if the module has been signed. * buildrun.cxx (modsign.h): #include it. (compile_pass): Call sign_module, if requested. * configure.ac: Define HAVE_NSS if NSS libraries are available. * Makefile.am (AM_CPPFLAGS): Add -DSYSCONFDIR. (bin_SCRIPTS): Add stap-env, stap-gen-cert, stap-authorize-cert, stap-authorize-signing-cert, stap-authorize-server-cert. Remove stap-gen-server-cert, stap-add-server-cert. (stap_SOURCES): Add nsscommon.c, modsign.cxx (stap_CPPFLAGS): Add $(nss_CFLAGS), $(nspr_CFLAGS). (stap_LDADD): Add -lnss3. (staprun_SOURCES): Add nsscommon.c. * modsign.cxx: New file. * modsign.h: New file. * nsscommon.c: New file. * nsscommon.h: New file. * runtime/staprun/modverify.c: New file. * runtime/staprun/modverify.h: New file. * stap-authorize-cert: New file. * stap-authorize-signing-cert: New file. * stap-env: New file. * Makefile.in: Regenerated. * aclocal.m4: Regenerated. * config.in: Regenerated. * configure: Regenerated. * doc/Makefile.in: Regenerated. * doc/SystemTap_Tapset_Reference/Makefile.in: Regenerated. * testsuite/Makefile.in: Regenerated. * testsuite/aclocal.m4: Regenerated.
* Kill all ChangeLogsJosh Stone2009-02-191-910/+0
| | | | | | Mark Wielaard, a dear friend of the departed, will be performing a song and dance at the funeral services to commemorate the joyous times that they had together.
* 2009-01-28 David Smith <dsmith@redhat.com>David Smith2009-01-282-0/+53
| | | | | | PR9788 * mainloop.c (cleanup_and_exit): Added workaround for bug 9788 by fork'ing/exec'ing staprun.
* Pick up --prefix dependency usage in config.h.Mark Wielaard2009-01-112-0/+7
|
* PR7082: support non-setuid use of $SYSTEMTAP_RUNTIME to find uprobes.koFrank Ch. Eigler2008-12-092-4/+17
|
* PR7063: honor SYSTEMTAP_STAPRUN and SYSTEMTAP_STAPIO environment variablesRoland McGrath2008-12-033-53/+77
|
* PR6925: tolerate modules left over from previous crashed? stap sessionsFrank Ch. Eigler2008-12-032-2/+18
|
* PR4783: remove traces of stap{run,io} self-renicingFrank Ch. Eigler2008-11-283-6/+7
|
* PR6964: configurably revert to signal-based "stap -c CMD" startup ↵Frank Ch. Eigler2008-11-122-29/+69
| | | | synchronization
* PR6964: temporary workaround for fedora utrace kernel bug 467568Wenji Huang2008-10-282-0/+25
|
* BZ467652: support old-style stap -c "FOO > BAR" usage by backing down to ↵Frank Ch. Eigler2008-10-231-7/+27
| | | | sh -c if needed.
* fix wordexp error handling, for invalid shell-like stap -c "command > file"Frank Ch. Eigler2008-10-152-3/+13
| | | | Reported-By: Wade Mealing <wmealing@redhat.com>
* PR4886: check build-id if able.Wenji Huang2008-10-061-0/+5
| | | | This provides sanity check of debuginfo file based on build-id. Many cases are considered, whether build-id exists in debuginfo file or not, whether module is loaded or not, whether build-id exists in runtime kernel/module. It will do work when LD >= 2.18 and kernel >=2.6.23, otherwise no check.
* Fix PR 6903 by checking for the real uid, not the euid.David Smith2008-09-182-1/+7
| | | | | | | | 2008-09-18 David Smith <dsmith@redhat.com> PR 6903. * staprun_funcs.c (check_permissions): Instead of checking the effective uid, check the real uid for root permissions.
* PR6445: documentation, mopping upFrank Ch. Eigler2008-09-061-0/+5
|
* "stap -c" cleanup part 2 - use wordexp / execvp instead of "sh -c" to ↵Frank Ch. Eigler2008-09-061-28/+30
| | | | execute cmd string
* task_finder <-> target_pid coupling; staprun/target_cmd fork under ptrace ↵Frank Ch. Eigler2008-09-051-298/+328
| | | | control
* remove capabilities logic, cont'dFrank Ch. Eigler2008-09-054-91/+73
|
* remove capability logicFrank Ch. Eigler2008-09-051-166/+0
| | | | | It was only barely beneficial anyway, since some crucial capabilities were never permanently dropped.
* PR6736: changelogs for post-merge compiled unwind/symbols data reorganizationFrank Ch. Eigler2008-07-101-0/+9
|
* pass /sys/module/*/sections/* addresses to the kernel module tooFrank Ch. Eigler2008-07-071-7/+83
|
* emit all symbol tables at compile time; don't do any module munging; new ↵Frank Ch. Eigler2008-07-041-1/+2
| | | | unwinder still disabled
* transport/symbol rework: kernel-only probes workingFrank Ch. Eigler2008-06-293-4/+14
|
* STP_RELOCATE message for kernel relocatability (re)adaption, starting ↵Frank Ch. Eigler2008-06-294-23/+128
| | | | implementation
* PR6429: remove unused fileFrank Ch. Eigler2008-06-031-97/+0
|