Re: proc pmda access control changes

[fche@xxxxxxxxxx (Frank Ch. Eigler)]

Nathan Scott <nathans@xxxxxxxxxx> writes:

> [...]
>> # pminfo -f proc.psinfo.ppid
>> 
>> proc.psinfo.ppid
>> Error: No permission to perform requested operation
>> 
>> What magic sauce is needed to restore the promiscuous mode for the proc
>> pmda?

AF_UNIX-based connection such as 

# pminfo -h local:// -f proc.psinfo.ppid

should let the root user poke at the psinfo.* hierarchy, without
SASL/etc. kicking in.

> [...] There is no pmdaproc backdoor, credentials must be presented
> ... should we consider adding one for back-compat?  I'd prefer not
> to, but guess we could go either way - it'd just take a non-default
> command line option to disable the checks.

That makes sense.

- FChE