[SCore-users-jp] MPICH-SCoreを用いたマンデルブロットの実行について

小堀 貴彦(NESI) kohori-t @ nesi.co.jp
2006年 3月 9日 (木) 17:34:22 JST


小堀と申します。

FedoraCore3+SCore5.8.3でPC8台でクラスタを構成していますが、
デモプログラムのマンデルブロットを実行すると、下記のメッセージが
出力されて実行できません。

[root @ server ~]# mpirun /opt/score/demo/bin/pmandel
-----------------------------------------------------------------------------
It is a Very Bad Idea to run this program as root.

LAM was designed to be run by individual users; it was *not* designed
to be run as a root-level service where multiple users use the same
LAM daemons in a client-server fashion.

Especially with today's propensity for hackers to scan for root-owned
network daemons, it could be tragic to run this program as root.
While LAM is known to be quite stable, and LAM does not leave network
sockets open for random connections after the initial setup, several
factors should strike fear into system administrator's hearts if LAM
were to be constantly running for all users to utilize:

        1. LAM leaves a Unix domain socket open on each machine in the
           /tmp directory.  So if someone breaks into root on one
           machine, they effectively have root on all machines that
           are connected via LAM.

        2. Indeed, there must have been a .rhosts (or some other trust
           mechanism) for root which must have allowed you to run LAM
           on remote nodes.  Depending on your local setup, this may
           not be safe.

        3. LAM has never been checked for buffer overflows and other
           malicious input types of errors.  We don't *think* that
           there are any buffer-overflow types of situations in LAM,
           we've never checked explicitly (hence, per Mr. Murphy,
           there are certainly some hiding somewhere).

        4. LAM programs are not audited or tracked in any way.  This
           could present a sneaky way to execute binaries without log
           trails (especially as root).

Hence, it's a Very Bad Idea to run LAM as root.  Please login as a
different user and run LAM again.
-----------------------------------------------------------------------------

上記メッセージによるとrootユーザでは実行禁止のように思えましたので、
他ユーザ(admin)に変更して実行してみましたが、今度はパーミッションの
問題で下記の通りエラーとなりました。
[admin @ server root]$ mpirun /opt/score/demo/bin/pmandel
/bin/rm: cannot remove `/root/.mpirtmp21349': 許可がありません
/bin/rm: cannot remove `/root/.mpirtmp21349': 許可がありません
/bin/rm: cannot remove `/root/.mpirtmp21349': 許可がありません
/bin/rm: cannot remove `/root/.mpirtmp21349': 許可がありません
SCOUT: connect: Permission denied

重ね重ね恐縮ですが、対処についてご教示をお願いします。 




SCore-users-jp メーリングリストの案内