Enhancement Advisory systemtap enhancement update

Advisory: RHEA-2008:0356-7
Type: Product Enhancement Advisory
Severity: N/A
Issued on: 2008-05-21
Last updated on: 2008-05-21
Affected Products: Red Hat Enterprise Linux (v. 5 server)
Red Hat Enterprise Linux Desktop (v. 5 client)
OVAL: N/A

Details

Updated systemtap packages that add enhancements are now available.

SystemTap is an instrumentation system for systems running the Linux 2.6
kernel. Developers can write scripts to collect data on the operation of
the system.

These updated packages add the following enhancements:

* the crash utility can now dump relayfs buffers, which are used by
SystemTap. Certain data recorded by SystemTap may only reside in relayfs
buffers. As such, crash extensions for SystemTap have been added, allowing
users to extract pending SystemTap trace data from a kernel crash image.

* a pair of SystemTap command line options, "-DRELAYHOST" and
"-DRELAYGUEST", make it possible for a single, long-running script, to
share (host) its kernel trace buffers with a number of other concurrent
(guest) scripts. This can reduce overall memory consumption, and centralize
the trace message data.

* in the previous systemtap packages, "udelay()" was used to calculate
timestamps. This was not accurate. In these updated packages, algorithms
that are aware of dynamic CPU freqency changes are used to estimate
frequency, allowing precise timestamp calculations, which resolves this
issue.

* a new security model has been added. This allows a system administrator
to designate certain, otherwise unprivileged users, the ability to run
arbitrary SystemTap scripts, by adding them to the "stapdev" group. Other
unprivileged users are able to run pre-compiled scripts that someone else
created, by adding them to the "stapusr" group.

* the systemtap packages have been updated to the latest upstream version,
as of February 2008. For further information, refer to the
"/usr/share/doc/systemtap-[version]/NEWS" file.

Note: the Linux kernel may become unstable with excessive wildcard usage
that probes every part of the kernel. As well, certain test suite failures
can occur, which are of little consequence, due to debuginfo limitations,
or incomplete tapset porting.

SystemTap is no longer a technical preview, and now has production
support. It is recommended that scripts be run on development machines
before being deployed in production. Since SystemTap is an optional
diagnostic tool, if it causes problems, users can simply stop using the
tool in that way. Options such as "-g" for Guru mode, and "-D*", allow
users to disable several security checks. Scripts using these options may
not be supported.

Red Hat will endeavor to fix problems in SystemTap, or the Linux kernel,
as they arise in connection with new scripts. In some cases, a fix may
include extending the blacklist for known areas of the Linux kernel, which
are unsafe to probe. In such a case, scripts causing these problems would
have to be changed.

Users of systemtap are advised to upgrade to these updated packages, which
add these enhancements.


Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

You will also need to download some prerequisites:
yum --enablerepo=rhel-debuginfo kernel-debuginfo kernel-devel

Updated packages

Red Hat Enterprise Linux (v. 5 server)

SRPMS:
systemtap-0.6.2-1.el5.src.rpm
File outdated by:  RHBA-2008:0923
    40d90af307039147b88177b33d5a1a3b
 
IA-32:
systemtap-0.6.2-1.el5.i386.rpm
File outdated by:  RHBA-2008:0923
    4780a09cb3d8122fe6efddaf5e35330f
systemtap-runtime-0.6.2-1.el5.i386.rpm
File outdated by:  RHBA-2008:0923
    cf1be47cd89a50553443468d76d9863d
systemtap-testsuite-0.6.2-1.el5.i386.rpm
File outdated by:  RHBA-2008:0923
    ea2068a41e98cae7d561a9f19bf4af2d
 
IA-64:
systemtap-0.6.2-1.el5.ia64.rpm
File outdated by:  RHBA-2008:0923
    636a6eadcb2d4b5095f72a50721dd3da
systemtap-runtime-0.6.2-1.el5.ia64.rpm
File outdated by:  RHBA-2008:0923
    2f83b3335ed082797b2bb9a1141706fc
systemtap-testsuite-0.6.2-1.el5.ia64.rpm
File outdated by:  RHBA-2008:0923
    98d1d6d1261f6d824eab1a45e2833467
 
PPC:
systemtap-0.6.2-1.el5.ppc64.rpm
File outdated by:  RHBA-2008:0923
    fad303a2d2d61add653e9eb8102c0fe9
systemtap-runtime-0.6.2-1.el5.ppc64.rpm
File outdated by:  RHBA-2008:0923
    ed45035fe92ff1656bc4ac4315f04c9b
systemtap-testsuite-0.6.2-1.el5.ppc64.rpm
File outdated by:  RHBA-2008:0923
    9793750ada14df830360f3c5c1258a2d
 
s390x:
systemtap-0.6.2-1.el5.s390x.rpm
File outdated by:  RHBA-2008:0923
    a1ef102206b248aa4c48a3939cef5aee
systemtap-runtime-0.6.2-1.el5.s390x.rpm
File outdated by:  RHBA-2008:0923
    f12d7135081068436a85933c7e5ae0b0
systemtap-testsuite-0.6.2-1.el5.s390x.rpm
File outdated by:  RHBA-2008:0923
    410a861b1a02c7b1898dad7f761b6dc6
 
x86_64:
systemtap-0.6.2-1.el5.x86_64.rpm
File outdated by:  RHBA-2008:0923
    ae2b8385d78108594634baeee1f729ab
systemtap-runtime-0.6.2-1.el5.x86_64.rpm
File outdated by:  RHBA-2008:0923
    6ebf7835a22bebde33fe1045b4da1a45
systemtap-testsuite-0.6.2-1.el5.x86_64.rpm
File outdated by:  RHBA-2008:0923
    ffa681ed0e46a4bc367a8a17ac9450f2
 
Red Hat Enterprise Linux Desktop (v. 5 client)

SRPMS:
systemtap-0.6.2-1.el5.src.rpm
File outdated by:  RHBA-2008:0923
    40d90af307039147b88177b33d5a1a3b
 
IA-32:
systemtap-0.6.2-1.el5.i386.rpm
File outdated by:  RHBA-2008:0923
    4780a09cb3d8122fe6efddaf5e35330f
systemtap-runtime-0.6.2-1.el5.i386.rpm
File outdated by:  RHBA-2008:0923
    cf1be47cd89a50553443468d76d9863d
systemtap-testsuite-0.6.2-1.el5.i386.rpm
File outdated by:  RHBA-2008:0923
    ea2068a41e98cae7d561a9f19bf4af2d
 
x86_64:
systemtap-0.6.2-1.el5.x86_64.rpm
File outdated by:  RHBA-2008:0923
    ae2b8385d78108594634baeee1f729ab
systemtap-runtime-0.6.2-1.el5.x86_64.rpm
File outdated by:  RHBA-2008:0923
    6ebf7835a22bebde33fe1045b4da1a45
systemtap-testsuite-0.6.2-1.el5.x86_64.rpm
File outdated by:  RHBA-2008:0923
    ffa681ed0e46a4bc367a8a17ac9450f2
 
(The unlinked packages above are only available from the Red Hat Network)


These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from:
https://www.redhat.com/security/team/key/#package

The Red Hat security contact is secalert@redhat.com. More contact details at http://www.redhat.com/security/team/contact/