<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=ISO-8859-1" http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000000">
Alexander Harvey wrote:
<blockquote
cite="mid610cb7a00608310738l3258da8fva406c8affb6ed91@mail.gmail.com"
type="cite">I am using sudo, except that customer won't sign the
change!:-)<br>
<br>
<div><span class="gmail_quote">On 9/1/06, <b class="gmail_sendername">Hari
Sekhon</b> <<a href="mailto:hpsekhon@googlemail.com">hpsekhon@googlemail.com
</a>> wrote:</span>
<blockquote class="gmail_quote"
style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div>
<div bgcolor="#ffffff" text="#000000">Alexander Harvey wrote:
</div>
<div><span class="e" id="q_10d64a6adf118bfe_1">Hi,<br>
<br>
I have a difficult customer who won't sign off changes based on the
security risk using suid plugins, for example, check_logfiles. What
does one do about this situation?<br>
<br>
Regards,<br>
Alex<br>
</span></div>
<div>
<pre><hr size="4" width="90%">
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
<a
href="http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642"
target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642</a></pre>
<pre><hr size="4" width="90%">
_______________________________________________
Nagios-users mailing list
<a href="mailto:Nagios-users@lists.sourceforge.net" target="_blank"
onclick="return top.js.OpenExtLink(window,event,this)">Nagios-users@lists.sourceforge.net
</a>
<a href="https://lists.sourceforge.net/lists/listinfo/nagios-users"
target="_blank" onclick="return top.js.OpenExtLink(window,event,this)">https://lists.sourceforge.net/lists/listinfo/nagios-users</a>
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null</pre>
<br>
<br>
use sudo, that's what it's for.<br>
<br>
<br>
<br>
Hari Sekhon<br>
</div>
</div>
</blockquote>
</div>
<br>
</blockquote>
tell the muppet customer that sudo is safer and was designed for this
purpose. No other account can use the command with the elevated
privilege and that no other user can use that account, especially if
you lock it and /bin/false it as well for 2 level protection that the
account can't be used by anybody (apart from root, by which point
you're already hosed and that will be the least of your worries).<br>
<br>
<br>
<br>
Hari Sekhon<br>
<br>
<br>
</body>
</html>