check-ping

[Jay R. Ashworth]

On Mon, Jul 14, 2008 at 01:54:03PM +0200, Andreas Ericsson wrote:
> Jeff Koch wrote:
> > Thanks for your help. When we ran ping as nagios it bombed. Permissions on 
> > ping needed to be set SUID root so that an ICMP socket could be opened. We 
> > had changed that for security reasons. We'll make nagios sudo root for 
> > ping. That should solve the problem.
> 
> Changing /bin/ping to not be suid root for security reasons and then changing
> Nagios to be suid root to fix a problem this causes seems more than just a
> little backwards to me.

I've left Jeff's quote in so you can see, Andreas, that you misread
him.  He didn't say "SUID root".  He said sudo -- he plans to set the
nagios Linux user up so it can sudo to run ping as root.

Seems sensible to me.

Cheers,
-- jra
-- 
Jay R. Ashworth                   Baylink                      jra at baylink.com
Designer                     The Things I Think                       RFC 2100
Ashworth & Associates     http://baylink.pitas.com                     '87 e24
St Petersburg FL USA      http://photo.imageinc.us             +1 727 647 1274

	     Those who cast the vote decide nothing.
	     Those who count the vote decide everything.
	       -- (Josef Stalin)

-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08
_______________________________________________
Nagios-users mailing list
Nagios-users at lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nagios-users
::: Please include Nagios version, plugin version (-v) and OS when reporting any issue. 
::: Messages without supporting info will risk being sent to /dev/null