From 98aab4894c500fd1c387e3619dc8aa2c096a8b89 Mon Sep 17 00:00:00 2001 From: dsmith Date: Tue, 14 Aug 2007 15:29:40 +0000 Subject: 2007-08-14 David Smith Merge from setuid-branch. Changes also by Martin Hunt . * Makefile.am: Added staprun_funcs.c and cap.c to staprun_SOURCES. Added -lcap to staprun_LDADD. Removed stp_check reference. Added stapio program. Staprun is now setuid. * Makefile.in: Rebuilt. * configure.ac: Version increase to 0.6 and checks for libcap availability. Removed stp_check reference. * configure: Regenerated. * stp_check.in: Removed. * systemtap.spec.in: Version increase to 0.6-1 and added BuildReq for libcap-devl (and removed sudo requirement). Added %pre script to create new groups. Staprun is now setuid. * NEWS: Added info on new security model. * INTERNALS: Removed sudo reference. * README.security: New file. * main.cxx (main): Make sure module name isn't too long. * hash.cxx: Moved MODULE_NAME_LEN define to hash.h. * hash.h: Moved MODULE_NAME_LEN define here from hash.cxx. * buildrun.cxx (run_pass): No longer runs staprun with "sudo". * stap.1.in: Removed sudo references and added information about the stapdev/stapusr groups. * staprun.8.in: Added information about module detaching and attaching. Removed sudo references and added information about the stapdev/stapusr groups. Removed reference to staprun needing to be run as root. Removed reference to removed '-u USERNAME' option. * .cvsignore: Removed stp_check and added stapio and stap_merge. --- buildrun.cxx | 4 +--- 1 file changed, 1 insertion(+), 3 deletions(-) (limited to 'buildrun.cxx') diff --git a/buildrun.cxx b/buildrun.cxx index 2e6d18d7..221d0463 100644 --- a/buildrun.cxx +++ b/buildrun.cxx @@ -131,11 +131,9 @@ run_pass (systemtap_session& s) string username = string(pw->pw_name); // for now, just spawn staprun - string staprun_cmd = string("sudo ") - + string(BINDIR) + "/staprun " + string staprun_cmd = string(BINDIR) + "/staprun " + (s.verbose>1 ? "-v " : "") + (s.verbose>2 ? "-v " : "") - + "-u " + username + " " + (s.output_file.empty() ? "" : "-o " + s.output_file + " "); staprun_cmd += "-d " + stringify(getpid()) + " "; -- cgit