Hi Neil,

2007/01/11 07:08:10 -0500, Neil Horman <[EMAIL PROTECTED]> wrote:
>> My idea is the same as yours. 
>> But there is one problem. On RHEL5.0-beta2, a normal user (no root)
>> cannot run makedumpfile directly due to no path of /sbin/makedumpfile.
>
>What?  Why can't a non-root user run makedumpfile?  I assume this is some
>sort of selinux targeted policy?  I would think the fast answer would be
>to update the policy and submit it for inclusion.  I can't see any rason
>why letting any user run makedumpfile would be a risk

I'm sorry to give you a false impression. 
I did not talk about SELinux. I told about path:

[EMAIL PROTECTED] ~]$ echo $PATH
/usr/kerberos/bin:/usr/local/bin:/bin:/usr/bin:/home/oomichi/bin
[EMAIL PROTECTED] ~]$ makedumpfile -v
-bash: makedumpfile: command not found
[EMAIL PROTECTED] ~]$ /sbin/makedumpfile -v
makedumpfile: version 1.0.7 (released on 08 December 2006)

[EMAIL PROTECTED] ~]$

I wanted to say that makedumpfile on a remote host should be operated
by full path (/sbin/makedumpfile), or makedumpfile's directory should
be changed (ex. /bin/makedumpfile).

>> It is not secure to require a root login of a remote host to transport
>> a dumpfile. It is necessary to change makedumpfile directory, or run
>> /sbin/makedumpfile on a remote host:
>> 
>> # makedumpfile -S -cd31 -i /tmp/makedumpfile.config /proc/vmcore | ssh 
>> [EMAIL PROTECTED] "/sbin/makedumpfile -R dumpfile"

Thanks
Ken'ichi Ohmichi
_______________________________________________
fastboot mailing list
[email protected]
https://lists.osdl.org/mailman/listinfo/fastboot

Reply via email to