[rrd-users] Re: rrdtool and 14all.cgi problem

[Serge Maandag]

Be careful there,

The mrtg config file usually holds your snmp passwords. You don't want
those to be publicly readable.

As an alternative you might want to use SUID (Set User ID) on the cgi
file.

You could for instance make the 14all.cgi script be owned by root and
make it run with the rights of it's owner (which is root).

Do it like this:

su
chown root.root 14all.cgi
chmod 455 14all.cgi

Be sure to read up on what security impacts SUID can have.

Serge Maandag 

> 14all.cgi is started from the webserver.  The webserver most likely
> runs as user "nobody", "noone", or "www".
> 
> > So it's a right issue. But I don't exactly know which 
> account does have to
> > have which rights....
> 
> Why not give read permission to all of your MRTG files to anyone ?
> 
> cheers
> -- 
>    __________________________________________________________________
>  / alex at slot.hollandcasino.nl                  
> alex at ergens.op.het.net \
> | work                                                        
>  private |
> | My employer is capable of speaking therefore I speak only 
> for myself |
> +-------------------------------------------------------------
> ---------+
> | Technical questions sent directly to me will be nuked. Use 
> the list. | 
> +-------------------------------------------------------------
> ---------+
> | http://faq.mrtg.org/                                        
>          |
> | http://rrdtool.eu.org  --> tutorial                         
>          |
> +-------------------------------------------------------------
> ---------+
> 
> --
> Unsubscribe 
> mailto:rrd-users-request at list.ee.ethz.ch?subject=unsubscribe
> Help        mailto:rrd-users-request at list.ee.ethz.ch?subject=help
> Archive     http://www.ee.ethz.ch/~slist/rrd-users
> WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi
> 
> 

--
Unsubscribe mailto:rrd-users-request at list.ee.ethz.ch?subject=unsubscribe
Help        mailto:rrd-users-request at list.ee.ethz.ch?subject=help
Archive     http://www.ee.ethz.ch/~slist/rrd-users
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi