Schedule An Immediate Check - I have rtfm and stfw no help

Michael W. Oliver michael at gargantuan.com
Sat Feb 8 02:51:45 CET 2003


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Friday, February 07, 2003 12:42, Michael W. Oliver wrote:
> more information...
>
> # ls /usr/local/nagios/var/rw
> total 2
> drwxrwS---  2 nagios  nagiocmd  512 Feb  5 15:11 ./
> drwxrwxr-x  4 nagios  nagios    512 Feb  7 12:41 ../
> prw-rw----  1 nagios  nagiocmd    0 Feb  5 15:11 nagios.cmd|
>
> # grep nagiocmd /etc/group
> nagiocmd:*:55554:nagios,nobody
>
> Now, I see in the 'SOLVED' reply that the 'nagios.cmd' file was created
> by the Nagios process with nagios:nagios ownership, but mine isn't
> created that way.  As you can see above, my nagios.cmd file is created
> with
> nagios:nagiocmd ownership.  You can also see that 'nobody' is part of the
> 'nagiocmd' group, which _should_ give 'nobody' rw access to the
> nagios.cmd file.  Even so, I still receive that error when trying to
> execute a command from the browser.  BAH!
>
> In addition, in the 'SOLVED' reply, it looks like the user 'nobody' was
> added to the 'nagios' group, effectively eliminating the need for the
> 'nagiocmd' group.  Isn't this insecure, putting the 'nobody' user in the
> 'nagios' group, effectively giving that user permission to everything
> that Nagios has permission to?  I was under the impression that the whole
> purpose of creating the new group was to limit the access of the 'nobody'
> user.
>
> What am I missing?  Thanks!
>
> --
<snip>

If there is anyone that can shed some light on why this isn't working, I 
would greatly appreciate it.

- -- 
- ------------------------------------------------------------------------
       Michael W. Oliver, CCNP | 
         IPv6 & FreeBSD mizark | "The tree of liberty must be refreshed
        michael at gargantuan.com |   from time to time with the blood of
http://michael.gargantuan.com/ |   patriots and tyrants."
           (via IPv4 and IPv6) |     - President Thomas Jefferson
IPv6 ASPathTree, Looking Glass |
- ------------------------------------------------------------------------


-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (FreeBSD)

iD8DBQE+RGK6sWv7q8X6o8kRAvusAJoD6I35uvAPYGl/WphHSXamIfqpmQCfZJN0
O4sl6LEp/Vmg2IK2PA7L2Uk=
=38CK
-----END PGP SIGNATURE-----



-------------------------------------------------------
This SF.NET email is sponsored by:
SourceForge Enterprise Edition + IBM + LinuxWorld = Something 2 See!
http://www.vasoftware.com




More information about the Users mailing list