1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
|
#!/bin/sh
# PCP QA Test No. 943
# Exercise pmdaproc access permission checking.
#
# Copyright (c) 2013 Red Hat.
#
seq=`basename $0`
echo "QA output created by $seq"
# get standard environment, filters and checks
. ./common.product
. ./common.filter
. ./common.check
_get_libpcp_config
$unix_domain_sockets || _notrun "No unix domain socket support available"
$authentication || _notrun "No authentication support available"
pminfo proc.nprocs >/dev/null 2>&1 || _notrun "proc PMDA not installed"
status=1 # failure is the default!
trap "cd $here; rm -rf $tmp.*; exit \$status" 0 1 2 3 15
_filter_counts()
{
# special case these ones ...
# proc.psinfo.cgroups -61 No data available
# proc.psinfo.cgroups -12350 Metric not supported by this version of monitored application
# proc.psinfo.cpusallowed -12350 Metric not supported by this version of monitored application
# proc.psinfo.ngid -12350 Metric not supported by this version of monitored application
# proc.psinfo.cgroups -12351 Missing metric value(s)
# then map any number of values to COUNT
#
sed \
-e '/proc.id.container/s/-61 No data available/1/' \
-e '/proc.id.container/s/-12350 .* application/1/' \
-e '/proc.psinfo.cgroups/s/-61 No data available/1/' \
-e '/proc.psinfo.cgroups/s/-12350 .* application/1/' \
-e '/proc.psinfo.cpusallowed/s/-12350 .* application/1/' \
-e '/proc.psinfo.ngid/s/-12350 .* application/1/' \
-e '/proc.psinfo.cgroups/s/-12351 .*/1/' \
| $PCP_AWK_PROG '$2 >= 0 { $2 = "COUNT" } { print }' \
| LC_COLLATE=POSIX sort
}
# lists of metrics
unprivileged="proc.nprocs proc.runq"
privileged="proc.psinfo proc.memory proc.id proc.fd"
# notes:
# proc.schedstat not present in older nor newer kernels (farewell!)
# proc.io file permissions sometimes prevent reading after seteuid?
# debug: pminfo -L -K add,3,proc/pmda_proc.so,proc_init proc.io -f
# real QA test starts here
echo "== Check unprivileged metric access"
pmprobe -h localhost $unprivileged | _filter_counts
echo "== Check protected per-process metric fetches (expect errors)"
pmprobe -h localhost $privileged | _filter_counts
echo "== Check authentic per-process metric fetches (expect values)"
pmprobe -h unix: $privileged | _filter_counts
# success, all done
status=0
exit
|
