Re: PCP Updates: pmlogger AF_UNIX socket for normal users; qa version check bump

[fche@xxxxxxxxxx (Frank Ch. Eigler)]

brolley wrote:

> [...]
> I suggest teaching it something similar to what is allowed for pmcd,
> if needed. i.e.
>
> allow users userlist : operations ;
> disallow users userlist : operations ;
> allow groups grouplist : operations ;
> disallow groups grouplist : operations ;

The reason we can't have exactly that is because we don't have
user/group databases/authentication in effect for the pmlc-pmlogger
connection.  (I don't think we really want to go there either.)

> I agree with Nathan that same-uid and same-gid should always be
> allowed full access.

This is not obviously appropriate.  GID's can be shared amongst many
people, and we definitely don't want to hard-code that kind of trust.
The same-UID one is arguable.  A person may want to prevent accidental
runtime modification of his logger, even by his own future processes.


- FChE