0 bytes pin using check_ping

[Andreas Ericsson]

Hari Sekhon wrote:
> how about just using sudo to grant the nagios user the suid equivalent 
> privilege since that's what it was designed for...
> 
> that's what I do with my plugins that need root.
> 

Sometimes that's correct and sometimes it's not. In the case of 
check_icmp, it requires root privileges roughly 0.2ms of its execution, 
and drops those privileges before touching any user-input what so ever. 
sudo does a whole lot more, and doesn't drop its root privileges ever, 
so for this particular case it's safer to make check_icmp a setsuid binary.

-- 
Andreas Ericsson                   andreas.ericsson at op5.se
OP5 AB                             www.op5.se
Tel: +46 8-230225                  Fax: +46 8-230231

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null