[ewg] Allowing ib dignostics to be run without being logged in as root.

[Hal Rosenstock]

On Tue, May 25, 2010 at 5:51 PM, Hal Rosenstock
<hal.rosenstock at gmail.com> wrote:
> On Tue, May 25, 2010 at 4:51 PM, Woodruff, Robert J
> <robert.j.woodruff at intel.com> wrote:
>>
>> Hi Sasha,
>>
>> Some people were asking me if it would be possible to
>> allow some of the IB diagnostic tools to be run without
>> requiring being logged in as root. Would there be
>> any problem in changing the installation to set their
>> permissions to setuid root to allow this, i.e.,
>>
>> chmod +s /usr/sbin/ibnetdiscover
>> chmod +s /usr/sbin/ibaddr
>> chmod +s /usr/sbin/smpquery
>> chmod +s /usr/sbin/perfquery
>
> If you really want any user to do this, is changing umad permissions
> sufficient ? This is less of a security hole than setuid but does open
> things up for malicious users.

IMO a better approach is to use sudo;

-- Hal

>
> -- Hal
>
>> woody
>> _______________________________________________
>> ewg mailing list
>> ewg at lists.openfabrics.org
>> http://lists.openfabrics.org/cgi-bin/mailman/listinfo/ewg
>>
>