[Nagiosplug-devel] introducing a check_if_root for setuid plugins

Hendrik Baecker andurin at process-zero.de
Fri May 25 08:33:09 CEST 2007


Hi Sean,

sounds good to me.

Many users just configure the command nearly blind and are wondering why
it doesn't work.
A simple "WARNING - This plugin should run with SETUID Bit" is a short
but powerful hint what they have to do.

Hendrik

sean finney schrieb:
> hey folks,
>
> just a preliminary poll before i spend any time on the code.  in debian, we 
> ship the check_dhcp/check_icmp with the setuid bits disabled by default, in 
> the interest of losing a little functionality for some increased security.  
> we have a documented method for how one overrides the permissions supplied
> by the package, but the problem is it's in the documentation, and sometimes
> users have trouble finding their way to the documentation...
>
> so i was thinking it might be helpful for each of these plugins to call a
> check_if_root() function before actually trying to perform their duties,
> and if it seems that they're not root, have them spit out either a warning or 
> an error message to be a little more informative.  what do you think?
>
>
> 	sean
>   
> ------------------------------------------------------------------------
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by DB2 Express
> Download DB2 Express C - the FREE version of DB2 express and take
> control of your XML. No limits. Just data. Click to get it now.
> http://sourceforge.net/powerbar/db2/
> ------------------------------------------------------------------------
>
> _______________________________________________________
> Nagios Plugin Development Mailing List Nagiosplug-devel at lists.sourceforge.net
> Unsubscribe at https://lists.sourceforge.net/lists/listinfo/nagiosplug-devel
> ::: Please include plugins version (-v) and OS when reporting any issue. 
> ::: Messages without supporting info will risk being sent to /dev/null





More information about the Devel mailing list