<!DOCTYPE html PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN">
<html>
<head>
<meta content="text/html;charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#ffffff" text="#000099">
One idea that we do here is to chroot the entire nagios dir and all
related components (mysql, apache, etc). The parent directory of the
chroot is owned by root and set to 700 perm's. It requires a bit of
tweaking to get it right and lots of reading through log files to work
out the inital bugs, but once that's done, it works. For that matter,
the server itself is virtualized... so its chrooted within a
virtualized container.<br>
<br>
Are you concerned with users getting in through the web page and
accessing the raw files and then knowing about your inside network or
employees gaining physical access to the server? The approach to
protect each is different. Or perhaps you're passing username/password
combos in some of the cfg files (ie: http testing, etc), so you want to
hide that? Easier solution is a nagios user with limited access to use
for this purpose. If you can elaborate on your areas of concern, we
could probably offer further input.<br>
<pre class="moz-signature" cols="72">
A. Davis
Email: <a class="moz-txt-link-abbreviated" href="mailto:nccomp@gmail.com">nccomp@gmail.com</a>
"There is no limit to what a man can accomplish
if he doesn't care who gets the credit." - Ronald Reagan
</pre>
<br>
<br>
Mat W wrote:
<blockquote cite="mid:BAY123-W4393021A16B2B0379204A0863F0@phx.gbl"
type="cite">
<style>
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Verdana
}
</style>if the idea is for others not to see it... why not just
ensure proper file ownership and limited permissions?<br>
<br>
Assuming only Root and Nagios users can read the file... I'd think
anyone that could become those users should be able to read them anyway.<br>
<br>
-- <br>
Mat W. - <a moz-do-not-send="true" href="http://www.techadre.com/">http://www.techadre.com</a><br>
<br>
<br>
<br>
<hr id="stopSpelling">
Date: Tue, 16 Jun 2009 11:53:11 -0400<br>
From: <a class="moz-txt-link-abbreviated" href="mailto:ebaddouh@gmail.com">ebaddouh@gmail.com</a><br>
To: <a class="moz-txt-link-abbreviated" href="mailto:nagios-users@lists.sourceforge.net">nagios-users@lists.sourceforge.net</a><br>
Subject: [Nagios-users] Configuration files obfuscation<br>
<br>
Hi,<br>
<br>
is ther a way to obfuscate configuration files?<br>
<br>
edward<br>
<br>
<hr>Bing™ brings you maps, menus, and reviews organized in one place.
<a moz-do-not-send="true"
href="http://www.bing.com/search?q=restaurants&form=MLOGEN&publ=WLHMTAG&crea=TEXT_MLOGEN_Core_tagline_local_1x1"
target="_new">Try it now.</a>
<pre wrap="">
<hr size="4" width="90%">
------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing
server and web deployment.
<a class="moz-txt-link-freetext" href="http://p.sf.net/sfu/businessobjects">http://p.sf.net/sfu/businessobjects</a></pre>
<pre wrap="">
<hr size="4" width="90%">
_______________________________________________
Nagios-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Nagios-users@lists.sourceforge.net">Nagios-users@lists.sourceforge.net</a>
<a class="moz-txt-link-freetext" href="https://lists.sourceforge.net/lists/listinfo/nagios-users">https://lists.sourceforge.net/lists/listinfo/nagios-users</a>
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue.
::: Messages without supporting info will risk being sent to /dev/null</pre>
</blockquote>
</body>
</html>