Schedule An Immediate Check - I have rtfm and stfw no help
Michael W. Oliver
michael at gargantuan.com
Sat Feb 8 02:51:45 CET 2003
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Friday, February 07, 2003 12:42, Michael W. Oliver wrote:
> more information...
>
> # ls /usr/local/nagios/var/rw
> total 2
> drwxrwS--- 2 nagios nagiocmd 512 Feb 5 15:11 ./
> drwxrwxr-x 4 nagios nagios 512 Feb 7 12:41 ../
> prw-rw---- 1 nagios nagiocmd 0 Feb 5 15:11 nagios.cmd|
>
> # grep nagiocmd /etc/group
> nagiocmd:*:55554:nagios,nobody
>
> Now, I see in the 'SOLVED' reply that the 'nagios.cmd' file was created
> by the Nagios process with nagios:nagios ownership, but mine isn't
> created that way. As you can see above, my nagios.cmd file is created
> with
> nagios:nagiocmd ownership. You can also see that 'nobody' is part of the
> 'nagiocmd' group, which _should_ give 'nobody' rw access to the
> nagios.cmd file. Even so, I still receive that error when trying to
> execute a command from the browser. BAH!
>
> In addition, in the 'SOLVED' reply, it looks like the user 'nobody' was
> added to the 'nagios' group, effectively eliminating the need for the
> 'nagiocmd' group. Isn't this insecure, putting the 'nobody' user in the
> 'nagios' group, effectively giving that user permission to everything
> that Nagios has permission to? I was under the impression that the whole
> purpose of creating the new group was to limit the access of the 'nobody'
> user.
>
> What am I missing? Thanks!
>
> --
<snip>
If there is anyone that can shed some light on why this isn't working, I
would greatly appreciate it.
- --
- ------------------------------------------------------------------------
Michael W. Oliver, CCNP |
IPv6 & FreeBSD mizark | "The tree of liberty must be refreshed
michael at gargantuan.com | from time to time with the blood of
http://michael.gargantuan.com/ | patriots and tyrants."
(via IPv4 and IPv6) | - President Thomas Jefferson
IPv6 ASPathTree, Looking Glass |
- ------------------------------------------------------------------------
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)
iD8DBQE+RGK6sWv7q8X6o8kRAvusAJoD6I35uvAPYGl/WphHSXamIfqpmQCfZJN0
O4sl6LEp/Vmg2IK2PA7L2Uk=
=38CK
-----END PGP SIGNATURE-----
-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com
More information about the Users
mailing list