Dtrace provides considerable information about a system, like all data in and out (including passwords and other sensitive data). By default, only root can run it (just like truss).
You can give other users privileges to run dtrace if necessary, but that is not the default.
--
Darren
> Actually any user can truss their own processes, as
> long as they don't setuid to another user..
Sorry, just talking in general... Wasn't the greatest example.
Yes, truss, kill, pargs and other similar things work only on processes that you have privilege over (by whatever means).
Dtrace needs a separate privilege setup because the probes won't necessarily be limited to a single process. So it has a different model.
The security chapter on dtrace has (a lot) more information...
http://docs.sun.com/app/docs/doc/817-6223/6mlkidln0?a=view
--
Darren