[This patch isn't finished yet, but I'm soliciting comments
before I take it any further]
PCP daemons on the Linux platform don't need to be run as the
root user - we can and should reduce the potential for security
issues by running these daemons as a "pcp" user. That includes
pmcd, pmlogger, pmie, pmproxy and PMDAs running as daemons.
This has popped up several times over the years and is something
we really should do before deploying PCP in serious enterprise
level environments.
This patch still needs work in pmdaproc.sh and a few other
areas (configure.in, non-Linux platforms, QA, etc), but it's
functional on Fedora so far as a proof of concept.
--
pcp_user.patch
Description: Text document
|