[dtrace-discuss] how can we use libdtrace within the DTrace security restrictions?

[Adam Leventhal]

Hey Matt,

> We've tried giving the user the dtrace_proc, dtrace_kernel and
> dtrace_user privileges, but the user cannot see or use the providers  
> in
> the process owned by another user.  Running by root or pfexec with
> Primary Admin profile works.  Is this by design?  Is there any good  
> way
> to address this?  Running NetBeans as root is impractical for a  
> variety
> of reasons.


Take a look at the chapter on security:

   http://wikis.sun.com/display/DTrace/Security

In particular, check the note in the dtrace_proc section.

Adam

--
Adam Leventhal, Fishworks                        http://blogs.sun.com/ahl