Of special interest is Chapter 35, on Security (see details on Casper Dik's weblog). In this chapter, we can familiarize ourselves with the 3 dtrace_* privileges that would be required for a non-root user to dtrace their own processes (or possibly even not their own processes).
Here is an example on what needs to be configured, and how to verify the configuration
In my case, as root, I executed the following to give user isaac dtrace_proc and dtrace_user privileges.
usermod -K defaultpriv=basic,dtrace_proc,dtrace_user isaac
which updated /etc/user_attr with the following line:
isaac::::type=normal;defaultpriv=basic,dtrace_proc,dtrace_user
You could also add 'dtrace_kernel' to these priveleges as well to be able to dtrace the kernel.
You have to re-login for these settings to take effect.
Verify on your own, running process as such:
$ /usr/sbin/dtrace -n 'pid$pid:libc.so.1::entry'
Additional references that might be of interest are:
- DTrace Case Study For Developers
- DTrace (for those of you who read Russian)
Posted by fdasfdsa on October 12, 2006 at 09:19 AM EDT #
which updated /etc/user_attr with the following line
Posted by runescape money on November 10, 2007 at 02:20 AM EST #