[Nagiosplug-devel] Security discussion - don't run as root plugins
Richard Edward Horner
rich at richhorner.com
Sat Jul 19 05:17:58 CEST 2008
Am I mistaken or doesn't check_mailq require root privileges? I have
not used every plugin that ships but I would imagine there would be at
least one more.
Thanks, Rich(ard)
> This is indeed a good idea... I think all plugins could drop privileges
> if they are run as root. We should probably make it an option for both
> Perl (Nagios::Plugins) and C plugins, and turn it to default behaviour
> in a major release.
--
Richard Edward Horner
Engineer / Composer / Electric Guitar Virtuoso
rich at richhorner.com
http://richhorner.com
More information about the Devel
mailing list