security & suid/sudo plugins

[rob.moss at uk.bnpparibas.com]

Or create a group with the owner of the logfiles + user that NRPE runs
under so that the group can read the logfile




Internet
hpsekhon at googlemail.com@lists.sourceforge.net - 31/08/2006 15:34


Sent by:    nagios-users-bounces at lists.sourceforge.net



To:    alexh19740110

cc:    nagios-users


Subject:    Re: [Nagios-users] security & suid/sudo plugins

Alexander Harvey wrote:
      Hi,

      I have a difficult customer who won't sign off changes based on the
      security risk using suid plugins, for example, check_logfiles. What
      does one do about this situation?

      Regards,
      Alex


      -------------------------------------------------------------------------

      Using Tomcat but need to do more? Need to support web services,
      security?
      Get stuff done quickly with pre-integrated technology to make your
      job easier
      Download IBM WebSphere Application Server v.1.0.1 based on Apache
      Geronimo
      http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642


      _______________________________________________
      Nagios-users mailing list
      Nagios-users at lists.sourceforge.net
      https://lists.sourceforge.net/lists/listinfo/nagios-users
      ::: Please include Nagios version, plugin version (-v) and OS when
      reporting any issue.
      ::: Messages without supporting info will risk being sent to
      /dev/null


use sudo, that's what it's for.



Hari Sekhon
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job
easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when
reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null


This message and any attachments (the "message") is 
intended solely for the addressees and is confidential. 
If you receive this message in error, please delete it and
immediately notify the sender. Any use not in accord with
its purpose, any dissemination or disclosure, either whole
or partial, is prohibited except formal approval. The internet
can not guarantee the integrity of this message.
BNP PARIBAS (and its subsidiaries) shall (will) not
therefore be liable for the message if modified. 

**********************************************************************************************

BNP Paribas Private Bank London Branch is authorised
by CECEI & AMF and is regulated by the Financial Services
Authority for the conduct of its investment business in
the United Kingdom.

BNP Paribas Securities Services London Branch is authorised 
by CECEI & AMF and is regulated by the Financial Services 
Authority for the conduct of its investment business in 
the United Kingdom.
  
BNP Paribas Fund Services UK Limited is authorised and 
regulated by the Financial Services Authority


-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null