[Nagiosplug-devel] [RFC] Plugins config file

[Benoit Mortier]

Le Lundi 16 Octobre 2006 13:13, Gavin Carr a écrit :
> I've got a perl nagios plugin that performs arbitrary queries against
> a database and reports status codes based on the number of rows
> returned i.e.
>
>   Usage: check_db_query_rowcount [-v] -q <query> -w <warn-count>
>             -c <crit-count> -d <dsn> -u <user> -p <pass>
>
> An obvious security problem with this is that the user must pass the
> database credentials on the command line, which typically means
> they're exposed to any local users via the process list for however
> long the plugin executes.
>
> This must be a problem for lots of other kinds of plugin too -
> anywhere you need to pass any kind of secret to a plugin. Is there a
> good way of dealing with this that I'm not aware of?

Hello,

i think it's a great idea

I'am all for it ..

Cheers
-- 
Benoit Mortier
CEO
www.opensides.be