search for: dtrace_us

Displaying 5 results from an estimated 5 matches for "dtrace_us".

Did you mean: dtrace's
2007 Apr 27
6
User Privileges and Dtrace
Dear Experts, My customer is migrating to Solaris 10 from Solaris 8 and have asked me to determine if: With Dtrace, is the user limited to probing only processes they own? The customer has a general security requirement to control user access via management of privileges. Currently, on Solaris 8, LDAP is strongly while RBAC is weakly applied. This will likely change in the Solaris 10 production
2007 Jan 31
1
[patch?] dtrace privs in zones ?
Hello, According to http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=4970596 and other notes I read it appears that the ability to run dtrace programs (by having dtrace_proc and dtrace_user privileges configured inside NGZ''s) has been made available (through various projects) since build 37 of Nevada. I am not merely referring to configurable privileges alone, but to the dtrace framework itself. Are there any plans to release this via a patch, targeting the /currentl...
2008 May 16
2
how can we use libdtrace within the DTrace security restrictions?
...ervices, edit configuration files and deploy content. Ideally, then the user would be able to transparently use the NetBeans IDE to develop/deploy content and use DTrace to observe what''s going on with their app. We''ve tried giving the user the dtrace_proc, dtrace_kernel and dtrace_user privileges, but the user cannot see or use the providers in the process owned by another user. Running by root or pfexec with Primary Admin profile works. Is this by design? Is there any good way to address this? Running NetBeans as root is impractical for a variety of reasons. Thanks in...
2008 Aug 25
11
pid-provider sees ld.so.1 only
I''m trying to do some userspace tracing on a server-process with the pid provider. My problem is, that the only probes the pid-provider lists for the server-process (to which I attach dtrace with "-p nnnn") are coming from "ld.so.1". There''s not a single one from my modules. If I''m specifying "a.out" (or any of our shared-objects) as the
2008 Sep 30
12
dtrace missing ''unlinkat''? showing process stack?
everyone, Just out of curiosity, I did a dtrace -n ''syscall:::entry { @num[execname, probefunc] = count(); }'' and looked at the entries produced by ''rm''. I see everything that rm did, *except* the unlinkat - which is unfortunate because I want to trace which processes have deleted which files. So - does dtrace contain unlinkat as a probe for a system call?