From 03d9fbb14c2f641e315be2419b70382bfd43f620 Mon Sep 17 00:00:00 2001
From: "Frank Ch. Eigler" <fche@elastic.org>
Date: Fri, 5 Feb 2010 16:55:22 -0500
Subject: PR11256: harden --unprivileged mode

* tapsets-mark.cxx, tapsets.cxx: Don't even publish probe point families that are
  inappropriate for use in --unprivileged mode.
  (dwarf_derived_probe_*unprivileged*): Remove, to default to blanket no-permission
  rather than emit_process_owner_permission mode.
* testsuite/semko/fortyeight.stp: New test.
---
 tapset-mark.cxx | 2 ++
 1 file changed, 2 insertions(+)

(limited to 'tapset-mark.cxx')

diff --git a/tapset-mark.cxx b/tapset-mark.cxx
index 6dbc55dc..4d873eed 100644
--- a/tapset-mark.cxx
+++ b/tapset-mark.cxx
@@ -714,6 +714,8 @@ mark_builder::build(systemtap_session & sess,
 void
 register_tapset_mark(systemtap_session& s)
 {
+  if (s.unprivileged) return;
+
   match_node* root = s.pattern_root;
   derived_probe_builder *builder = new mark_builder();
 
-- 
cgit