Why we need to set the root permission for HawkHMA?

Why we need to set the root permission for HawkHMA?

book

Article ID: KB0091231

calendar_today

Updated On:

Products Versions
TIBCO Runtime Agent (TRA) -
Not Applicable -

Description

Resolution:
For UNIX, TIB/Hawk HMA (binary name tibhawkhma) should be setuid and owned by root. This binary should have the privileges to access the processes run on the system. System kernel information requires root access in order to become "visible". And hawk is designed to monitor system kernel information.
If this is not done correctly, it defeats the purpose of hawk monitoring.
Once that's done, you may run it as an user but the effective user becomes root which allows you to see other processes owned by root when using
getProcess method.

Issue/Introduction

Why we need to set the root permission for HawkHMA?