[Nagiosplug-devel] Security discussion - don't run as root plugins

Richard Edward Horner rich at richhorner.com
Sat Jul 19 05:17:58 CEST 2008


Am I mistaken or doesn't check_mailq require root privileges? I have
not used every plugin that ships but I would imagine there would be at
least one more.

Thanks, Rich(ard)

> This is indeed a good idea... I think all plugins could drop privileges
> if they are run as root. We should probably make it an option for both
> Perl (Nagios::Plugins) and C plugins, and turn it to default behaviour
> in a major release.

-- 
Richard Edward Horner
Engineer / Composer / Electric Guitar Virtuoso
rich at richhorner.com
http://richhorner.com




More information about the Devel mailing list