***SPAM*** Re: [ofa-general] Allowing end-users to query for fabric information

[Hal Rosenstock]

On Mon, Sep 22, 2008 at 2:42 PM, Mike Heinz <michael.heinz at qlogic.com> wrote:
> I recently noticed that OFED prohibits non-root users from doing sa queries.
> This means that non-root users cannot, for example, diagnose connectivity
> problems without the help of an administrator.
>
> What was the reason for making this design choice?

It was decided as the default to limit what non root users can do the
fabric as a primitive security measure. It controls more than just SA
queries.

> While I could certainly
> provide boot scripts to change the permissions to /dev/infiniband/umad*, I'd
> rather understand why the decision was made to restrict access.

udev can easily be changed for a configuration that desires different defaults.

-- Hal

>
> --
> Michael Heinz
> Principal Engineer, Qlogic Corporation
> King of Prussia, Pennsylvania
>
> _______________________________________________
> general mailing list
> general at lists.openfabrics.org
> http://lists.openfabrics.org/cgi-bin/mailman/listinfo/general
>
> To unsubscribe, please visit
> http://openib.org/mailman/listinfo/openib-general
>