summaryrefslogtreecommitdiffstats
path: root/stap-client
Commit message (Collapse)AuthorAgeFilesLines
* Set a timeout when prompting for consent to trust a server as a SSL peer.Dave Brolley2010-03-031-2/+2
|
* PR 10331: Improved certificate management -- client side.Dave Brolley2010-03-031-42/+87
| | | | | | | | stap-client-connect.c: use SSL_BadCertHoook to provide an opportunity for the user to trust and/or import the server's certificate. stap-client: Reorganized so that newly trusted certificates can be used. Also does the actual prompting.
* Don't pass client-only options to the server.Dave Brolley2010-02-151-6/+12
| | | | Also correct parsing of the --server option.
* PR 11105: Remaining client-side problems:Dave Brolley2010-02-021-41/+47
| | | | | stap-client: Correct handling of embedded newlines in arguments. server_args.exp: Add additional cases discovered by fche and by fuzzing.
* Correct client-side quoting issues discovered by fche during the server-side ↵Dave Brolley2010-01-181-43/+64
| | | | | | reimplementation. Also add the test cases to the test suite.
* PR11105: remove extraneous \n from localized foo.stp script file nameFrank Ch. Eigler2010-01-151-1/+1
|
* PR11105: robustify stap-serverFrank Ch. Eigler2010-01-151-0/+5
| | | | | | | | | | | * main.cxx (main): Always downgrade client-provided -p5 to -p4. * stap-client (unpack_response): Sanitize stdout due to same. * stap-server-connect.c: Eliminate a bunch of globals. (handle_connection): Make things locals instead. Base tmp files on $TMPDIR. (spawn_and_wait): New helper function. (handleRequest): New monster function to inline rest of old stap-server-request.
* PR11105: stap-client wire protocol changeDave Brolley2010-01-151-114/+99
|
* Take care when echoing something that could start with a -.Dave Brolley2010-01-071-1/+1
|
* Client argument handling:Dave Brolley2010-01-071-7/+9
| | | | | | | Pass partial options to the server instead of complaining about them in the client. Update known failures from buildok in server.exp.
* PR 10247, 10276, 10905: Move remaining client/server tools to libexec.Dave Brolley2009-12-211-10/+10
|
* PR 10247 10276 10905: Infrastructure for moving underlying client/server ↵Dave Brolley2009-12-181-1/+1
| | | | tools to libexec.
* Remove unused variable.Dave Brolley2009-12-151-4/+0
|
* No need to pass -c option to the server.Dave Brolley2009-12-021-2/+1
|
* stap-server initscript fully functional.Dave Brolley2009-10-261-1/+1
|
* stap-start-server(->stap-serverd) now accept -r -R -I -B and -a options for ↵Dave Brolley2009-09-181-26/+36
| | | | | | | cross compilation. Server correctly advertises itself wrt -r and -a. Fix bug in stap-server: fatal function was potentially recursive.
* Check for unprivileged options conflicts on the server side.Dave Brolley2009-09-171-39/+98
| | | | Gneral work on options in the client and server.
* stap-client will now always choose a compatible server even for phases 1-3.Dave Brolley2009-08-281-4/+5
| | | | Always start a local server needed by the test suite (make {install}check).
* 2009-04-14 Dave Brolley <brolley@redhat.com>Dave Brolley2009-04-141-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * translate.cxx (c_unparser::emit_unprivileged_user_check): Generate code to check _stp_unprivileged_user. * testsuite/lib/systemtap.exp (setup_server): Copy stap-env to $net_path. * runtime/transport/transport.c: Set up _stp_unprivileged_user. * runtime/staprun/staprun_funcs.c (check_signature): Distiguish among verification failure due to errors, tampering, untrusted signer. (check_permissions): Likewise. (check_groups): Set unprivileged_user. * runtime/staprun/staprun.c (insert_stap_module): Set _stp_unprivileged_user. * runtime/staprun/modverify.h (MODULE_OK): #define it. (MODULE_UNTRUSTED,MODULE_CHECK_ERROR,MODULE_ALTERED): Likewise. * runtime/staprun/modverify.c (modverify.h): #include it. (verify_it): Distiguish among verification failure due to errors, tampering, untrusted signer. (verify_module): Likewise. * runtime/staprun/common.c (unprivileged_user): Define it. * runtime/staprun/staprun.h (unprivileged_user): Declare it. * cache.cxx (get_from_cache): Get the module signature file. * stap-authorize-server-cert: Source `dirname $0`/stap-env. * stap-authorize-signing-cert: Likewise. * stap-client: Likewise. * stap-find-or-start-server: Likewise. * stap-find-servers: Likewise. * stap-gen-cert: Likewise. * stap-server: Likewise. * stap-serverd: Likewise. * stap-start-server: Likewise.
* 2009-03-12 Dave Brolley <brolley@redhat.com>Dave Brolley2009-03-121-55/+29
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * util.cxx (remove_file_or_dir): New function. * util.h (remove_file_or_dir): New function. * systemtap.spec (stap): Add stap-env, stap-gen-cert, stap-authorize-cert, and stap-authorize-signing-cert. (stap-client): Remove stap-find-or-start-server, stap-add-server-cert. Add stap-authorize-server-cert. (stap-server): Add stap-find-servers, stap-find-or-start-server, stap-authorize-server-cert. Remove stap-gen-server-cert. * stap-find-servers: Source stap-env. Use $stap_avahi_service_tag. (initialization): Set timeout to 10. (find_servers): Run avahi-browse in the background and wait for it. Use a temp file for the output of avahi-browse. Kill avahi-browse if the timeout expires. (match_server): Set read timeout. (fatal): New function. * stap-find-or-start-server: Source stap-env. Use $stap_exec_prefix. Always exit with 0. * stap-start-server: Source stap-env. Check for the server PID as a running process and for avahi-publish-service running as a child in order to verify that the server is ready. * stap-add-server-cert: Renamed to stap-authorize-server-cert. Source stap-env. Call stap-authorize-cert. * stap-client: Source stap-env. Use $stap_user_ssl_db and $stap_root_ssl_db. Use $stap_tmpdir_prefix_client, $stap_tmpdir_prefix_server. Use $stap_exec_prefix. (configuration): Removed. (staprun_running): Removed. (interrupt): Don't kill staprun. * stap-server: Source stap-env. Use $stap_user_ssl_db and $stap_root_ssl_db. Use $stap_tmpdir_prefix_client, $stap_tmpdir_prefix_server. Use $stap_exec_prefix. (configuration): Removed. * session.h (systemtap_session): Add cert_db_path. * runtime/staprun/staprun_funcs.c (config.h): #include it. (modverify.h): #include it. (check_signature): New function. (check_groups): New function extracted from check_permissions. (check_permissions): Call check_groups and check_signature. * runtime/staprun/mainloop.c (cleanup_and_exit): Pass modpath to staprun, not modname. * main.cxx (main): Initialize cert_db_path. Handle LONG_OPT_SIGN_MODULE. Save the module signature if the module was signed and is being saved. (LONG_OPT_SIGN_MODULE): #define it. (long_options): Add --sign-module. * cache.cxx (config.h): #include it. (add_to_cache): Add the module signature file to the cache if the module has been signed. * buildrun.cxx (modsign.h): #include it. (compile_pass): Call sign_module, if requested. * configure.ac: Define HAVE_NSS if NSS libraries are available. * Makefile.am (AM_CPPFLAGS): Add -DSYSCONFDIR. (bin_SCRIPTS): Add stap-env, stap-gen-cert, stap-authorize-cert, stap-authorize-signing-cert, stap-authorize-server-cert. Remove stap-gen-server-cert, stap-add-server-cert. (stap_SOURCES): Add nsscommon.c, modsign.cxx (stap_CPPFLAGS): Add $(nss_CFLAGS), $(nspr_CFLAGS). (stap_LDADD): Add -lnss3. (staprun_SOURCES): Add nsscommon.c. * modsign.cxx: New file. * modsign.h: New file. * nsscommon.c: New file. * nsscommon.h: New file. * runtime/staprun/modverify.c: New file. * runtime/staprun/modverify.h: New file. * stap-authorize-cert: New file. * stap-authorize-signing-cert: New file. * stap-env: New file. * Makefile.in: Regenerated. * aclocal.m4: Regenerated. * config.in: Regenerated. * configure: Regenerated. * doc/Makefile.in: Regenerated. * doc/SystemTap_Tapset_Reference/Makefile.in: Regenerated. * testsuite/Makefile.in: Regenerated. * testsuite/aclocal.m4: Regenerated.
* New basic tests for client/server.Dave Brolley2009-02-201-2/+2
|
* Server response is no longer signed. Passed as a zip archive instead.Dave Brolley2009-02-111-22/+23
|
* Touch up warning message from stap-clientDave Brolley2009-02-031-1/+1
|
* Update NEWS and stap-server man page. Don't require client/serverDave Brolley2009-02-021-3/+2
| | | | platform compatibility for pahes 1-4.
* More security checking for client/server. Set exec_prefix and sysconfdir at ↵Dave Brolley2009-01-301-51/+76
| | | | install time.
* Improved certificate security for the client/server.Dave Brolley2009-01-291-22/+36
|
* Improvements to the flexibility of the --server option.Dave Brolley2009-01-291-25/+38
|
* Check client side certificate database security.Dave Brolley2009-01-281-7/+146
|
* Implement the --server option for stap-client for control over which server isDave Brolley2009-01-281-43/+123
| | | | used and for using non-local servers.
* Ensure that the client/server scripts call the installed copies of anyDave Brolley2009-01-131-19/+37
| | | | other systemtap tools.
* New framework for creating/using certificate databases for client/server.Dave Brolley2009-01-091-10/+40
|
* Systemtap compile server phase 2 (ssl) -- first cut.Dave Brolley2008-12-241-103/+91
|
* Don't use -d on $netcat. Redirect from /dev/null instead.Dave Brolley2008-12-111-1/+1
|
* Use netcat or nc, whichever is available.Dave Brolley2008-12-091-3/+8
|
* Ensure $first_stap is not empty in staprun_PATHDave Brolley2008-09-121-0/+6
|
* Robustness improvements for the stap client/serverDave Brolley2008-08-251-12/+23
|
* stap client/server now pass 'make installcheck'Dave Brolley2008-08-201-18/+76
|
* PR 6834Dave Brolley2008-08-141-58/+25
|
* Minor bugs in stap-client.Dave Brolley2008-08-131-6/+45
|
* stap-serverd was incorectly determining that the server couldDave Brolley2008-08-111-1/+1
| | | | not be started.
* Start/stop the systemtap server from systemtap.exp and not in the top level ↵Dave Brolley2008-08-081-53/+98
| | | | Makefile.
* No need for random suffix file cmdline and sysinfo files in theDave Brolley2008-07-301-11/+5
| | | | client's request tree.
* Ensure that a systemtap server is available if 'server' is specifiedDave Brolley2008-07-291-104/+100
| | | | in EXTRA_TOOL_OPTS for 'make check' and 'make installcheck'
* Use `uname -rvm` for checking system compatibility. GenerateDave Brolley2008-07-081-2/+14
| | | | a finale response from the server to allow for error checking.
* client/server take 2. See bz6565.Dave Brolley2008-07-031-62/+84
|
* Use the -r option of avahi-browse to obtain the ip addressDave Brolley2008-06-021-28/+46
| | | | and port of the server.
* New systemptap compile client and server scripts.Dave Brolley2008-05-301-0/+588
generated by cgit (git 2.34.1) at 2024-05-02 18:18:42 +0000