pcp
[Top] [All Lists]

Re: [pcp] pmlogconf including proc metrics?

To: "Frank Ch. Eigler" <fche@xxxxxxxxxx>, Ken McDonell <kenj@xxxxxxxxxxxxxxxx>
Subject: Re: [pcp] pmlogconf including proc metrics?
From: Nathan Scott <nathans@xxxxxxxxxx>
Date: Fri, 19 Jul 2013 20:21:50 -0400 (EDT)
Cc: PCP Mailing List <pcp@xxxxxxxxxxx>
Delivered-to: pcp@xxxxxxxxxxx
In-reply-to: <y0mob9yy61o.fsf@xxxxxxxx>
References: <51E91E01.6060602@xxxxxxxxxxxxxxxx> <y0mob9yy61o.fsf@xxxxxxxx>
Reply-to: Nathan Scott <nathans@xxxxxxxxxx>
Thread-index: GmGHWpca55i7pR44iAKgIjkmvZvjyQ==
Thread-topic: pmlogconf including proc metrics?

----- Original Message -----
> ...
> OTOH, with the authentication code now working, we should install the
> proc pmda by default (in a secure mode; in src/pmdas/linux_proc/contexts.c
> proc_ctx_access(), use uid/gid=nobody if ! CTX_USERID.
> 

"nobody" has a bit of an existential crisis, and is actually somebody
in some situations ... e.g.

nobody    4270     1  0 Jul18 ?        00:00:00 /usr/sbin/dnsmasq 
--strict-order --bind-interfaces 
--pid-file=/var/run/libvirt/network/default.pid --conf-file= --except-interface 
lo --listen-address 192.168.122.1 --dhcp-range 192.168.122.2,192.168.122.254 
--dhcp-leasefile=/var/lib/libvirt/dnsmasq/default.leases --dhcp-lease-max=253 
--dhcp-no-override

I was thinking we could just simply give back EPERM for those proc
metrics which are per-process (which is not all of proc.*), in the
case where no userid/groupid has been made available to pmdaproc
(I haven't coded this bit yet though, IIRC).

cheers.

--
Nathan

<Prev in Thread] Current Thread [Next in Thread>