[ewg] Allowing ib dignostics to be run without being logged in as root.

[Jon Forrest]

On 5/25/2010 1:51 PM, Woodruff, Robert J wrote:
>
> Hi Sasha,
>
> Some people were asking me if it would be possible to
> allow some of the IB diagnostic tools to be run without
> requiring being logged in as root. Would there be
> any problem in changing the installation to set their
> permissions to setuid root to allow this, i.e.,
>
> chmod +s /usr/sbin/ibnetdiscover
> chmod +s /usr/sbin/ibaddr
> chmod +s /usr/sbin/smpquery
> chmod +s /usr/sbin/perfquery

As someone who's a novice to IB, but a long
time system manager, I'd say that this would be
a very risky thing to do. You'd better hope
that none of these program have any lurking
security holes.

Cordially,
-- 
Jon Forrest
Research Computing Support
College of Chemistry
173 Tan Hall
University of California Berkeley
Berkeley, CA
94720-1460
510-643-1032
jlforrest at berkeley.edu