aboutsummaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorPetter Reinholdtsen <pere@hungry.com>2010-01-16 14:12:22 +0000
committerPetter Reinholdtsen <pere@hungry.com>2010-01-16 14:12:22 +0000
commit4d9688f2de4cddd6a69e45b9b4bc82aeb3f6d2d2 (patch)
tree36017e37066675f2bf6b7fcb7bbcadb7cfd37dc6
parent9ef8471026541e7f397f2f9f3696f6e6e53f400f (diff)
downloadsitesummary-4d9688f2de4cddd6a69e45b9b4bc82aeb3f6d2d2.tar.gz
sitesummary-4d9688f2de4cddd6a69e45b9b4bc82aeb3f6d2d2.tar.bz2
sitesummary-4d9688f2de4cddd6a69e45b9b4bc82aeb3f6d2d2.tar.xz
Rewrite cron check to not allow nrpe to report on any process for security reasons.
-rw-r--r--nagios-nrpe-commands.cfg1
-rw-r--r--nagios-templates.cfg4
-rwxr-xr-xsitesummary-nodes2
3 files changed, 4 insertions, 3 deletions
diff --git a/nagios-nrpe-commands.cfg b/nagios-nrpe-commands.cfg
index 6a03cc9..1924b3a 100644
--- a/nagios-nrpe-commands.cfg
+++ b/nagios-nrpe-commands.cfg
@@ -6,5 +6,6 @@ command[check_disk]=/usr/lib/nagios/plugins/check_disk -w $ARG1$ -c $ARG2$ -p $A
command[check_nfs]=/usr/lib/nagios/plugins/check_rpc -H localhost -C nfs -c2,3
command[check_ntp]=/usr/lib/nagios/plugins/check_ntp -H localhost
command[check_procs]=/usr/lib/nagios/plugins/check_procs -w $ARG1$ -c $ARG2$
+command[check_procs_cron]=/usr/lib/nagios/plugins/check_procs -w $ARG1$ -c $ARG2$ -C cron
command[check_procs_zombie]=/usr/lib/nagios/plugins/check_procs -w $ARG1$ -c $ARG2$ -s Z
command[check_swap]=/usr/lib/nagios/plugins/check_swap -w $ARG1 -c $ARG2$
diff --git a/nagios-templates.cfg b/nagios-templates.cfg
index 4ddca23..8d6e457 100644
--- a/nagios-templates.cfg
+++ b/nagios-templates.cfg
@@ -158,8 +158,8 @@ define command{
}
define command{
- command_name check_procs_command
- command_line /usr/lib/nagios/plugins/check_procs -w $ARG1$ -c $ARG2$ -C $ARG3$
+ command_name check_procs_cron
+ command_line /usr/lib/nagios/plugins/check_procs -w $ARG1$ -c $ARG2$ -C cron
}
define command{
diff --git a/sitesummary-nodes b/sitesummary-nodes
index 98bf860..11f8987 100755
--- a/sitesummary-nodes
+++ b/sitesummary-nodes
@@ -296,7 +296,7 @@ EOF
# Detect if cron no longer is running
print_nagios_service_check($remote, $hostname, "process - cron",
- "check_procs_command", "1:15!1:25!cron")
+ "check_procs_cron", "1:15!1:25")
if (is_pkg_installed($hostid, "cron"));
print_nagios_service_check($remote, $hostname, "dhcp",