You can jail the nagios user the same way you can jail any other username. If you're going to run a jailed system, then apache and your other services should also be jailed. <div class="gmail_quote">On Mon, Mar 2, 2009 at 4:07 AM, hamouda <<a href="mailto:dimmumeister@gmail.com">dimmumeister@gmail.com</a>> wrote: <blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">yes I know about that but I'm trying to make it more secure and put the nagios user in a "jail" but I don't know how to do it. can u please tell me more about developping plugin for nagios to administrate iptables because I just found a check_iptables plugin to know the status of iptbales on a remote host. Right I'm going to develop a perl script to manipulate the iptables rules from the shell, then host the cgi script by an apache server to test it. And then I look forward to add it as a plugin to nagios. Is it doable?? Thx :) Looking forward to your answer :) 2009/3/2, Ovidiu Marcu <<a href="mailto:Ovidiu.Marcu@tdn.de">Ovidiu.Marcu@tdn.de</a>>: <div><div></div><div class="Wj3C7c">> Hi, > > You can give rights to user nagios from /etc/sudoers so you can do anything > with nagios ;) > > > Viele Grüße, > > ServiceDesk_TDN > Ovidiu Marcu > > > -----Original Message----- > From: hamouda [mailto:<a href="mailto:dimmumeister@gmail.com">dimmumeister@gmail.com</a>] > Sent: Sunday, March 01, 2009 11:53 PM > To: Ovidiu Marcu; <a href="mailto:nagiosplug-devel@lists.sourceforge.net">nagiosplug-devel@lists.sourceforge.net</a> > Subject: Re: [Nagiosplug-devel] Iptables,snort,acid,clamav,nessus,osiris > > I think that developping a plugin to setup iptables through nagios > can't be done because : > first : nagios runs as the user nagios which has not a root > privileges to modify iptables > second : the nagios plugins returns a significant code between 0 and 3 > wich indicates the state of the service > third : nagios is meant to be for monitoring and nothing else. > any other ideas ? > Am I mistaken?? > thx 4 replying > > 2009/3/1 hamouda <<a href="mailto:dimmumeister@gmail.com">dimmumeister@gmail.com</a>>: >> Thx 4 answering. >> If I manage developping any plugin I'll tell you about it :) >> >> 2009/3/1 Ovidiu Marcu <<a href="mailto:Ovidiu.Marcu@tdn.de">Ovidiu.Marcu@tdn.de</a>>: >>> Hi, >>> >>> You can do a lot with nagios. >>> For example : I'm monitoring if the time is synchronized on servers, and >>> if it is not, nagios automatically restarts ntpd on the server that is >>> not in sync. >>> I've learned how to do script by looking at other scripts made in perl, >>> and by learning perl by myself. >>> You can find plugins on the internet for almost everything. >>> >>> >>> Viele Grüße, >>> >>> ServiceDesk_TDN >>> Ovidiu Marcu >>> >>> -----Original Message----- >>> From: hamouda [mailto:<a href="mailto:dimmumeister@gmail.com">dimmumeister@gmail.com</a>] >>> Sent: Sunday, March 01, 2009 1:10 AM >>> To: Ovidiu Marcu >>> Subject: Re: [Nagiosplug-devel] Iptables,snort,acid,clamav,nessus,osiris >>> >>> I know that it is used for monitoring stuff but I'm wondering if I can >>> use it for administration by developping my own scripts. >>> any idea?? >>> >>> 2009/2/28 Ovidiu Marcu <<a href="mailto:Ovidiu.Marcu@tdn.de">Ovidiu.Marcu@tdn.de</a>>: >>>> Hi, >>>> >>>> Nagios is used for monitoring stuff :) >>>> I usually monitor the logs, or if there are changes in the >>>> configurations. >>>> To check small configuration changes, I usually make my own scripts in >>>> perl. >>>> >>>> Viele Grüße, >>>> >>>> ServiceDesk_TDN >>>> Ovidiu Marcu >>>> >>>> >>>> -----Original Message----- >>>> From: hamouda [mailto:<a href="mailto:dimmumeister@gmail.com">dimmumeister@gmail.com</a>] >>>> Sent: Saturday, February 28, 2009 10:13 AM >>>> To: <a href="mailto:nagiosplug-devel@lists.sourceforge.net">nagiosplug-devel@lists.sourceforge.net</a> >>>> Subject: [Nagiosplug-devel] Iptables,snort,acid,clamav,nessus,osiris >>>> >>>> Hi everyone, I am a newbie in the nagios world and I'm trying to >>>> develop plugins for nagios to administrate >>>> iptables,snort,acid,clamav,nessus and osiris. >>>> Have anyone already tried doing this or have anyone any idea if what >>>> I'm trying to do is doable?? >>>> Any tutorials for plugin developping ?? >>>> Thx for answering :) >>>> -- >>>> being selfish won't help you progressing, learn & share that's the >>>> point. Give a hand in the forums to help the others & urself; >>>> <a href="http://www.fedora-tunisia.org/" target="_blank">http://www.fedora-tunisia.org/</a> >>>> <a href="http://forums.fedora-fr.org/" target="_blank">http://forums.fedora-fr.org/</a> >>>> <a href="http://fedora.kiewel-online.de/repoview/linux/releases/7/" target="_blank">http://fedora.kiewel-online.de/repoview/linux/releases/7/</a> >>>> >>>> ------------------------------------------------------------------------------ >>>> Open Source Business Conference (OSBC), March 24-25, 2009, San >>>> Francisco, CA >>>> -OSBC tackles the biggest issue in open source: Open Sourcing the >>>> Enterprise >>>> -Strategies to boost innovation and cut costs with open source >>>> participation >>>> -Receive a $600 discount off the registration fee with the source code: >>>> SFAD >>>> <a href="http://p.sf.net/sfu/XcvMzF8H" target="_blank">http://p.sf.net/sfu/XcvMzF8H</a> >>>> _______________________________________________________ >>>> Nagios Plugin Development Mailing List >>>> <a href="mailto:Nagiosplug-devel@lists.sourceforge.net">Nagiosplug-devel@lists.sourceforge.net</a> >>>> Unsubscribe at >>>> <a href="https://lists.sourceforge.net/lists/listinfo/nagiosplug-devel" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagiosplug-devel</a> >>>> ::: Please include plugins version (-v) and OS when reporting any issue. >>>> ::: Messages without supporting info will risk being sent to /dev/null >>>> >>> >>> >>> >>> -- >>> being selfish won't help you progressing, learn & share that's the >>> point. Give a hand in the forums to help the others & urself; >>> <a href="http://www.fedora-tunisia.org/" target="_blank">http://www.fedora-tunisia.org/</a> >>> <a href="http://forums.fedora-fr.org/" target="_blank">http://forums.fedora-fr.org/</a> >>> <a href="http://fedora.kiewel-online.de/repoview/linux/releases/7/" target="_blank">http://fedora.kiewel-online.de/repoview/linux/releases/7/</a> >>> >> >> >> >> -- >> being selfish won't help you progressing, learn & share that's the >> point. Give a hand in the forums to help the others & urself; >> <a href="http://www.fedora-tunisia.org/" target="_blank">http://www.fedora-tunisia.org/</a> >> <a href="http://forums.fedora-fr.org/" target="_blank">http://forums.fedora-fr.org/</a> >> <a href="http://fedora.kiewel-online.de/repoview/linux/releases/7/" target="_blank">http://fedora.kiewel-online.de/repoview/linux/releases/7/</a> >> > > > > -- > being selfish won't help you progressing, learn & share that's the > point. Give a hand in the forums to help the others & urself; > <a href="http://www.fedora-tunisia.org/" target="_blank">http://www.fedora-tunisia.org/</a> > <a href="http://forums.fedora-fr.org/" target="_blank">http://forums.fedora-fr.org/</a> > <a href="http://fedora.kiewel-online.de/repoview/linux/releases/7/" target="_blank">http://fedora.kiewel-online.de/repoview/linux/releases/7/</a> > -- being selfish won't help you progressing, learn & share that's the point. Give a hand in the forums to help the others & urself; <a href="http://www.fedora-tunisia.org/" target="_blank">http://www.fedora-tunisia.org/</a> <a href="http://forums.fedora-fr.org/" target="_blank">http://forums.fedora-fr.org/</a> <a href="http://fedora.kiewel-online.de/repoview/linux/releases/7/" target="_blank">http://fedora.kiewel-online.de/repoview/linux/releases/7/</a> ------------------------------------------------------------------------------ Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA -OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise -Strategies to boost innovation and cut costs with open source participation -Receive a $600 discount off the registration fee with the source code: SFAD <a href="http://p.sf.net/sfu/XcvMzF8H" target="_blank">http://p.sf.net/sfu/XcvMzF8H</a> _______________________________________________________ Nagios Plugin Development Mailing List <a href="mailto:Nagiosplug-devel@lists.sourceforge.net">Nagiosplug-devel@lists.sourceforge.net</a> Unsubscribe at <a href="https://lists.sourceforge.net/lists/listinfo/nagiosplug-devel" target="_blank">https://lists.sourceforge.net/lists/listinfo/nagiosplug-devel</a> ::: Please include plugins version (-v) and OS when reporting any issue. ::: Messages without supporting info will risk being sent to /dev/null </div></div></blockquote></div>