[opensolaris-summit] about SUNT5120

[Martin Bochnig]

Hi Andrew,

could you please post this message to a more relevant list, such as
http://mail.opensolaris.org/mailman/listinfo/security-discuss
http://mail.opensolaris.org/mailman/listinfo/perf-discuss
or the general opensol list?

Yes, sometimes you may get RBAC errors like this, some tiny thing missing 
from the misc. config files auth_attr, user_attr, prof_attr may be 
enough to cause this. I assume you re-checked everything from a to z?

rgds. Martin
(let's move over to above lists ...)


On Mon, 
5 May 2008, Andrew Stanely wrote:

>
> HI,
>
> I am doing research about  multicore computers.
>
> our group got a SUN T5120 server with solaris 10 OS.
>
> The server processor is Ultra-sparc T2 processor with 8 cores.
>
> I am trying to run CPU2000 benchmark on it.
>
> But, Now , I got a problem.
>
> I divide the 64 virtual processors into 8 groups, and each group has 8 virtual processors .
>
> I assign 11 CPU2000 floating point benchmark programs to each group so that the total work load is 11 x 8.
> I need to make sure that all processes of the benchmarks only run in their assigned group.
>
> I have to use "psrset" command in "super user " mode to divide the virtual processors.
>
> And then I designed a shell script to run CPU2000 benchmarks as a normal user.
>
> But, I got :
>
> $ ./myjob.sh
> /usr/sbin/psrset: cannot exec in processor set 1: Not owner
>
> I also have studied RBAC (Role Based Access Control) and
> set up a role for my user name in order to run psrset -e (with optional arguments) in  the specified processor set.
>
> In this way, I want to make sure that the command process and  any  child  processes  of the benchmarks are
> executed only by processors in their assigned processor set.
>
> my command :
> psrset  -e 1 runspec  --config=sun_sparc_solaris --size=ref --noreportable -- iterations=1  swim
>
>
> And, I have added the followg line in the file  /etc/security/exec_attr
>
> Runshrc:suser:cmd:::/usr/sbin/psrset:uid=0
>
> I have also tried to use "pbind" , I got the same error.
>
> Would you please help me  ?
>
>
> Thanks,
>
> Andrew
>
> May  4  2008
>
> _________________________________________________________________
> Get Free (PRODUCT) RED?  Emoticons, Winks and Display Pics.
> http://joinred.spaces.live.com?ocid=TXT_HMTG_prodredemoticons_052008