How limit external commands to no-admin users?

Ben Polson ben.polson at ehealth.com
Fri Mar 18 18:08:24 CET 2005


Try:

    <Directory /usr/local/nagios/var/rw>
        AllowOverride None
        Options None
        Order Allow,Deny
        Allow from 10.212.0.0/255.255.255.0
    </Directory>

-Ben.


-----Original Message-----
From: nagios-users-admin at lists.sourceforge.net
[mailto:nagios-users-admin at lists.sourceforge.net]On Behalf Of Marco
Borsani
Sent: Friday, March 18, 2005 8:37 AM
To: nagios-users
Subject: R: [Nagios-users] How limit external commands to no-admin
users?


I try to limit all users connected from a specific network, with the
followinf lines inside the httpd.conf, but nothing happen!

    <Directory /usr/local/nagios/var/rw>
        AllowOverride None
        Options None
        Order Deny,Allow
        Deny from all
        Allow from 10.212.0.0/255.255.255.0
    </Directory>

Why these lines have not impact on my environment?

Marco

-}-----Messaggio originale-----
-}Da: nagios-users-admin at lists.sourceforge.net
-}[mailto:nagios-users-admin at lists.sourceforge.net]Per conto di Marco
-}Borsani
-}Inviato: giovedi 17 marzo 2005 11.33
-}A: nagios-users
-}Oggetto: [Nagios-users] How limit external commands to no-admin users?
-}
-}
-}
-}Hi all
-}
-}My environment is quite complex, specially regarding security policies.
-}
-}I would use external commands via CGI interface, but I can not
-}permit to ALL
-}nagios users.
-}
-}My httpd have been started from www (unix user); putting this user in the
-}nagios group I permit to write the nagios.cmd file to everyone !
-}
-}I need to limit this "write access" only to a unix/apache user only.
-}
-}Is it possible? How?
-}
-}I try to modify httpd.conf file, but .... I do not know how !
-}
-}Thanks
-}Marco
-}
-}
-}
-}-------------------------------------------------------
-}SF email is sponsored by - The IT Product Guide
-}Read honest & candid reviews on hundreds of IT Products from real users.
-}Discover which products truly live up to the hype. Start reading now.
-}http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
-}_______________________________________________
-}Nagios-users mailing list
-}Nagios-users at lists.sourceforge.net
-}https://lists.sourceforge.net/lists/listinfo/nagios-users
-}::: Please include Nagios version, plugin version (-v) and OS
-}when reporting any issue.
-}::: Messages without supporting info will risk being sent to /dev/null



-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting
any issue.
::: Messages without supporting info will risk being sent to /dev/null





-------------------------------------------------------
SF email is sponsored by - The IT Product Guide
Read honest & candid reviews on hundreds of IT Products from real users.
Discover which products truly live up to the hype. Start reading now.
http://ads.osdn.com/?ad_id=6595&alloc_id=14396&op=click
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null





More information about the Users mailing list