I attempted to add the dtrace privileges to /etc/user_attr but it does not appear to work. I found a writeup from 2005 asking about this, but the answer does not seem to work for me. I set it to mylogin:::defaultpriv=basic,dtrace_user,dtrace_proc,dtrace_kernel but I still get the message (when I try to run iosnoop) dtrace: failed to initialize dtrace: DTrace requires additional privileges I had checked the iosnoop man page and it says that dtrace_kernel is required. -- Sabba - ??? ??? - Hillel Hillel (Sabba) Markowitz | Said the fox to the fish, "Join me ashore" SabbaHillel at gmail.com | The fish are the Jews, Torah is our water http://photos1.blogger.com/blogger/7637/544/640/SabbaHillel.jpg
On Tue, Dec 15, 2009 at 1:38 PM, Hillel (Sabba) Markowitz <sabbahillel at gmail.com> wrote:> I attempted to add the dtrace privileges to /etc/user_attr but it does > not appear to work. I found a writeup from 2005 asking about this, but > the answer does not seem to work for me. I set it to > > mylogin:::defaultpriv=basic,dtrace_user,dtrace_proc,dtrace_kernel > > but I still get the message (when I try to run iosnoop) > > dtrace: failed to initialize dtrace: DTrace requires additional privileges > > I had checked the iosnoop man page and it says that dtrace_kernel is required.While generating the below output, I noticed that you''re missing a '':'' in your /etc/user_attr line. Try adding that, and see if it works. After you''ve done that, you can check the privileges on your shell with ppriv: ultra20$ ppriv $$ 146999: -ksh flags = <none> E: basic I: basic P: basic L: all ultra20$ The above shell has only the basic privileges. You should see something like this: ultra20$ ppriv $$ 147444: -ksh flags = <none> E: basic,dtrace_kernel,dtrace_proc,dtrace_user I: basic,dtrace_kernel,dtrace_proc,dtrace_user P: basic,dtrace_kernel,dtrace_proc,dtrace_user L: all ultra20$ Chad
On Tue, Dec 15, 2009 at 1:52 PM, Chad Mynhier <cmynhier at gmail.com> wrote:> On Tue, Dec 15, 2009 at 1:38 PM, Hillel (Sabba) Markowitz > <sabbahillel at gmail.com> wrote: >> I attempted to add the dtrace privileges to /etc/user_attr but it does >> not appear to work. I found a writeup from 2005 asking about this, but >> the answer does not seem to work for me. I set it to >> >> mylogin:::defaultpriv=basic,dtrace_user,dtrace_proc,dtrace_kernel >> >> but I still get the message (when I try to run iosnoop) >> >> dtrace: failed to initialize dtrace: DTrace requires additional privileges >> >> I had checked the iosnoop man page and it says that dtrace_kernel is required. > > While generating the below output, I noticed that you''re missing a '':'' > in your /etc/user_attr line. ?Try adding that, and see if it works.Thanks. after I logged out and logged in again, it worked. Thanks for spotting the obvious typo that I missed. -- Sabba - ??? ??? - Hillel Hillel (Sabba) Markowitz | Said the fox to the fish, "Join me ashore" SabbaHillel at gmail.com | The fish are the Jews, Torah is our water http://photos1.blogger.com/blogger/7637/544/640/SabbaHillel.jpg