| To: | "Frank Ch. Eigler" <fche@xxxxxxxxxx>, Ken McDonell <kenj@xxxxxxxxxxxxxxxx> |
|---|---|
| Subject: | Re: [pcp] pmlogconf including proc metrics? |
| From: | Nathan Scott <nathans@xxxxxxxxxx> |
| Date: | Fri, 19 Jul 2013 20:21:50 -0400 (EDT) |
| Cc: | PCP Mailing List <pcp@xxxxxxxxxxx> |
| Delivered-to: | pcp@xxxxxxxxxxx |
| In-reply-to: | <y0mob9yy61o.fsf@xxxxxxxx> |
| References: | <51E91E01.6060602@xxxxxxxxxxxxxxxx> <y0mob9yy61o.fsf@xxxxxxxx> |
| Reply-to: | Nathan Scott <nathans@xxxxxxxxxx> |
| Thread-index: | GmGHWpca55i7pR44iAKgIjkmvZvjyQ== |
| Thread-topic: | pmlogconf including proc metrics? |
----- Original Message ----- > ... > OTOH, with the authentication code now working, we should install the > proc pmda by default (in a secure mode; in src/pmdas/linux_proc/contexts.c > proc_ctx_access(), use uid/gid=nobody if ! CTX_USERID. > "nobody" has a bit of an existential crisis, and is actually somebody in some situations ... e.g. nobody 4270 1 0 Jul18 ? 00:00:00 /usr/sbin/dnsmasq --strict-order --bind-interfaces --pid-file=/var/run/libvirt/network/default.pid --conf-file= --except-interface lo --listen-address 192.168.122.1 --dhcp-range 192.168.122.2,192.168.122.254 --dhcp-leasefile=/var/lib/libvirt/dnsmasq/default.leases --dhcp-lease-max=253 --dhcp-no-override I was thinking we could just simply give back EPERM for those proc metrics which are per-process (which is not all of proc.*), in the case where no userid/groupid has been made available to pmdaproc (I haven't coded this bit yet though, IIRC). cheers. -- Nathan |
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Re: [pcp] odd problem in qa/255 for UNIX domain socket for pmcd, Nathan Scott |
|---|---|
| Next by Date: | Re: [pcp] odd problem in qa/255 for UNIX domain socket for pmcd, Ken McDonell |
| Previous by Thread: | Re: pmlogconf including proc metrics?, Frank Ch. Eigler |
| Next by Thread: | MySQL logrewriter needed still, Nathan Scott |
| Indexes: | [Date] [Thread] [Top] [All Lists] |