This is the mail archive of the
systemtap-cvs@sourceware.org
mailing list for the systemtap project.
[SCM] systemtap: system-wide probe/trace tool branch, master, updated. release-1.6-487-gbb4470c
- From: brolley at sourceware dot org
- To: systemtap-cvs at sourceware dot org
- Date: 23 Nov 2011 18:48:10 -0000
- Subject: [SCM] systemtap: system-wide probe/trace tool branch, master, updated. release-1.6-487-gbb4470c
- Reply-to: systemtap at sourceware dot org
This is an automated email from the git hooks/post-receive script. It was
generated because a ref change was pushed to the repository containing
the project "systemtap: system-wide probe/trace tool".
The branch, master has been updated
via bb4470cacb3f7ce5161f9e8a1b7c37a87516a6c3 (commit)
via f6be7c061559d319c4422ce5ad17e7ae5a0e405e (commit)
from be898cc4485951b10e692932a49144b5a00deef1 (commit)
Those revisions listed above that are new to this repository have
not appeared on any other notification email; so we list those
revisions in full, below.
- Log -----------------------------------------------------------------
commit bb4470cacb3f7ce5161f9e8a1b7c37a87516a6c3
Author: Dave Brolley <brolley@redhat.com>
Date: Wed Nov 23 13:44:40 2011 -0500
PR 13128: Implement module privilege check in staprun.
- staprun extracts the required privilege level from signed modules
and compares it against the user's actual privilege credentials
before loading.
commit f6be7c061559d319c4422ce5ad17e7ae5a0e405e
Author: Dave Brolley <brolley@redhat.com>
Date: Tue Nov 22 11:13:28 2011 -0500
PR 13128: Implement the new --privilege=stapsys
- Users belonging to the group stapsys can use all probe points and tapset
functions (including those which contain embedded C), but cannot
use the -g option.
- Loading of modules for stapsys users requires signing by a trusted compile-server.
- Add testing for stapsys throughout as appropriate.
- Update existing unprivileged test suites to test stapsys as appropriate.
- New test suite tests -g against all privilege levels.
-----------------------------------------------------------------------
Summary of changes:
csclient.cxx | 2 +-
elaborate.cxx | 8 +-
elaborate.h | 2 +-
privilege.cxx | 40 ++-
privilege.h | 12 +-
runtime/addr-map.c | 6 +-
runtime/runtime.h | 4 +-
runtime/staprun/staprun_funcs.c | 316 ++++++++++++--------
runtime/task_finder.c | 6 +-
session.cxx | 86 ++++--
stap-serverd.cxx | 24 +-
staptree.cxx | 4 +-
systemtap.spec | 1 +
tapsets.cxx | 3 +-
testsuite/systemtap.server/client.exp | 174 ++++++-----
testsuite/systemtap.server/client_args.exp | 39 +++-
.../unprivileged_embedded_C.exp | 59 +++--
.../systemtap.unprivileged/unprivileged_myproc.exp | 131 ++++++---
.../unprivileged_options.exp | 48 +++
.../systemtap.unprivileged/unprivileged_probes.exp | 125 ++++++---
translate.cxx | 5 +-
21 files changed, 713 insertions(+), 382 deletions(-)
create mode 100644 testsuite/systemtap.unprivileged/unprivileged_options.exp
hooks/post-receive
--
systemtap: system-wide probe/trace tool