From 27dc09b13650456b7b3efd45c07690083e526b6d Mon Sep 17 00:00:00 2001 From: Dave Brolley Date: Mon, 15 Feb 2010 13:56:20 -0500 Subject: Rework identification of probes allowed for unprivileged users. - Bind unprivileged permission at probe registration time. - Remove check_unprivileged filter from derived_probe_builder and its children. - Add test suites for unprivilegedok and unprivilegedko. --- tapset-utrace.cxx | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) (limited to 'tapset-utrace.cxx') diff --git a/tapset-utrace.cxx b/tapset-utrace.cxx index fc2fbc1d..73f52c4d 100644 --- a/tapset-utrace.cxx +++ b/tapset-utrace.cxx @@ -654,10 +654,6 @@ struct utrace_builder: public derived_probe_builder has_path, path, pid, flags)); } - - // No action required. These probes are allowed for unprivileged users. - virtual void check_unprivileged (const systemtap_session & sess, - const literal_map_t & parameters) {} }; @@ -1062,16 +1058,22 @@ register_tapset_utrace(systemtap_session& s) for (unsigned i = 0; i < roots.size(); ++i) { roots[i]->bind(TOK_BEGIN) + ->bind_unprivileged() ->bind(builder); roots[i]->bind(TOK_END) + ->bind_unprivileged() ->bind(builder); roots[i]->bind(TOK_THREAD)->bind(TOK_BEGIN) + ->bind_unprivileged() ->bind(builder); roots[i]->bind(TOK_THREAD)->bind(TOK_END) + ->bind_unprivileged() ->bind(builder); roots[i]->bind(TOK_SYSCALL) + ->bind_unprivileged() ->bind(builder); roots[i]->bind(TOK_SYSCALL)->bind(TOK_RETURN) + ->bind_unprivileged() ->bind(builder); } } -- cgit