[ewg] Allowing ib dignostics to be run without being logged in as root.

Hal Rosenstock hal.rosenstock at gmail.com
Tue May 25 14:51:23 PDT 2010


On Tue, May 25, 2010 at 4:51 PM, Woodruff, Robert J
<robert.j.woodruff at intel.com> wrote:
>
> Hi Sasha,
>
> Some people were asking me if it would be possible to
> allow some of the IB diagnostic tools to be run without
> requiring being logged in as root. Would there be
> any problem in changing the installation to set their
> permissions to setuid root to allow this, i.e.,
>
> chmod +s /usr/sbin/ibnetdiscover
> chmod +s /usr/sbin/ibaddr
> chmod +s /usr/sbin/smpquery
> chmod +s /usr/sbin/perfquery

If you really want any user to do this, is changing umad permissions
sufficient ? This is less of a security hole than setuid but does open
things up for malicious users.

-- Hal

> woody
> _______________________________________________
> ewg mailing list
> ewg at lists.openfabrics.org
> http://lists.openfabrics.org/cgi-bin/mailman/listinfo/ewg
>



More information about the ewg mailing list