This is the mail archive of the systemtap@sourceware.org mailing list for the systemtap project.
Index Nav: | [Date Index] [Subject Index] [Author Index] [Thread Index] | |
---|---|---|
Message Nav: | [Date Prev] [Date Next] | [Thread Prev] [Thread Next] |
Other format: | [Raw text] |
1) Need to have sshd running on target machine and allow ssh. (minor)Thanks for reviewing. The above two issues can be resolved, will look into it.
2) The plugin stores the user ssh/scp password as plan text. (major)
This file is world readable:
~/workspace/.metadata/.plugins/org.eclipse.core.runtime/.settings/com.ibm.systemtapgui.generic.consolelog.prefs
3) The plugin does syntax checking on the system eclipse is runningTo solve this we would either need to eliminate syntax checking(or do only very basic checking) or be able to access the systemtap
on. However, the system that server is running may be different.
It is possible the script might check okay on plugin but not run
on server due to those differences.
4) The systemtapgui-server may allow other processes to connect up
and run things on the target machine. Could be exploited for
attacks on machine running systemtapgui-server.
I' m not very comfortable with the idea of packaging the server with systemtap due to possible maintenance/legal issues.Rethinking how the plugin and systemtap works. A couple possible use cases for this functionality are:
1) Same person running everything on one machine to make use of the graphing and eclipse environment.
2) Person developing on one machine which has everything on it (systemtap, debuginfo, kernel-devel...) and sending the resulting instrumentation module to a stripped down machine.
The sysetmtapgui-server currently does the following:
-process management on remote machine -build the instrumentation -executes script -collect stdout/stderr
The systemtap compile server does a portion of the work that the
systemtapguiserver does. However, the systemtap compile server doesn't
run the resulting script or send the output to a remote machine. The
thought would be to minimize systemtapgui-server, so it only reports
the kernel being used (so compile server can build appropriate
instrumentation for target) and runs prebuilt modules with
staprun. Have this instrumentation server in the the systemtap source and
package it like the systemtap compile server and client.
Regards, Anithra.
-Will
Index Nav: | [Date Index] [Subject Index] [Author Index] [Thread Index] | |
---|---|---|
Message Nav: | [Date Prev] [Date Next] | [Thread Prev] [Thread Next] |