This is the mail archive of the systemtap@sourceware.org mailing list for the systemtap project.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]
Other format: [Raw text]

[Bug runtime/15193] New: assigned_user_credentials = pr_stapdev


http://sourceware.org/bugzilla/show_bug.cgi?id=15193

             Bug #: 15193
           Summary: assigned_user_credentials = pr_stapdev
           Product: systemtap
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: runtime
        AssignedTo: systemtap@sourceware.org
        ReportedBy: henrik@kaarposoft.dk
    Classification: Unclassified


Systemtap version 2.1.

I have created a small systemtap script and compiled with "stap
--privilege=stapsys".
As root, I can "staprun" the script just fine.

As root I have installed the script in "/lib/modules/`uname -r`/systemtap".

If I try "staprun" as a user in groups staprun and stapsys (but NOT stapdev), I
get this error message:
ERROR: Your privilege credentials (stapdev) are insufficient to run this module
(stapsys required).

I find this a bit strange, as the user is NOT a member of stapdev as claimed,
but the user IS a member of stapsys as required.

The above scenario was working way back with systemtap version 1.8, but is now
failing with 2.1.

I looked at commit 429a4963, which introduced this around line 756 in
staprun/staprun_funcs.c:
  if (assigned_user_credentials)
    assigned_user_credentials = pr_stapdev;

If I change this to
    assigned_user_credentials |= pr_stapdev;
the above scenario works like a charm.

-- 
Configure bugmail: http://sourceware.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.


Index Nav: [Date Index] [Subject Index] [Author Index] [Thread Index]
Message Nav: [Date Prev] [Date Next] [Thread Prev] [Thread Next]