Restrict user only to enable/disable checks

[Marc Powell]

On Mar 9, 2010, at 3:01 AM, Jelle Smet wrote:

> Hi list,
> 
> 
> I'm looking for a way to allow users do pretty much everything of the host and service commands except enabling & disabling them.
> 
> I believe these are
> 
> cmd_typ=16 (for all services on the host)
> cmd_typ=4 (for the host check)
> cmd_typ=6 (for a service check)
> 
> There are a couple of things which come to my mind such as mod_security, or some other apache level restricting stuff.

I expect that you could use htaccess to do this. Completely off the top of my head and untested but try something like this in the .htaccess file in the sbin directory --

RewriteEngine on
RewriteCond %{QUERY_STRING} ^(cmd_type=16|cmd_type=4|cmd_type=6) [OR] 
RewriteRule ^(.*)$ /not_allowed.html [R,L] 

--
Marc
------------------------------------------------------------------------------
Download Intel® Parallel Studio Eval
Try the new software tools for yourself. Speed compiling, find bugs
proactively, and fine-tune applications for parallel performance.
See why Intel Parallel Studio got high marks during beta.
http://p.sf.net/sfu/intel-sw-dev
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null