[Bug translator/10561] New: stap-server: take over signing duties, allow arg passing to stap

[Bug translator/10561] New: stap-server: take over signing duties, allow arg passing to stap

[fche at redhat dot com]

It is sometimes desirable to launch stap-server processes on a machine
with multiple sets of kernel-debuginfo/devel installed (as in a master
compilation server), or for cross-arch purposes.  For this to work,
each stap-server needs to accept some arguments at startup time
(at least -a, -r, -B, for the nonce).

OTOH, unprivileged mode support specifically disabled some of these 
flags within stap.  Yet we want that too.

So it seems like a possible solution is to clarify what stap options
may be passed through which layer.  It seems as though stap-server
should pass some server-admin-specified flags (might as well come
from stap-start-server), and block these same ones from clients
(as they arrive from stap-client or whatever in the request-containing
zip file).  It'd have to safely collate the two lists of options, and
pass them to plain stap.

Since stap-server would now perform stap argument sanitization, it
becomes probably the best place to do module-signing.  That means
stap wouldn't do it (even in the --unprivileged case), just include
some more constraints during the translation process.

-- 
           Summary: stap-server: take over signing duties, allow arg passing
                    to stap
           Product: systemtap
           Version: unspecified
            Status: NEW
          Severity: normal
          Priority: P2
         Component: translator
        AssignedTo: systemtap at sources dot redhat dot com
        ReportedBy: fche at redhat dot com


http://sourceware.org/bugzilla/show_bug.cgi?id=10561

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug translator/10561] stap-server: take over signing duties, allow arg passing to stap

[brolley at redhat dot com]

------- Additional Comments From brolley at redhat dot com  2009-08-26 14:52 -------
With this proposed change the usage module officially changes from "in order to
have their modules loaded, unprivileged users should compile their modules using
a systemtap server" to "in order to have their modules loaded, unprivileged
users *must* compile their modules using a systemtap server".


-- 
           What    |Removed                     |Added
----------------------------------------------------------------------------
         AssignedTo|systemtap at sources dot    |brolley at redhat dot com
                   |redhat dot com              |
             Status|NEW                         |ASSIGNED


http://sourceware.org/bugzilla/show_bug.cgi?id=10561

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

[Bug translator/10561] stap-server: take over signing duties, allow arg passing to stap

[fche at redhat dot com]

-- 
           What    |Removed                     |Added
----------------------------------------------------------------------------
OtherBugsDependingO|                            |10907
              nThis|                            |


http://sourceware.org/bugzilla/show_bug.cgi?id=10561

------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.