Xymon Mailing List Archive search

Some newbie help

list Rob Munsch
Thu, 19 Jan 2006 13:20:27 -0500
Message-Id: <user-e386036536d3@xymon.invalid>

I have to really, really, really, strongly disagree with this in heavily emphasized bold type.

With a monitor running on every important machine, one of the things I like is that only the hobbit user can run hobbit, and the hobbit user can't do anything else - including sudo.  It's important not to let 'little holes' like this pile up.  The pile gets large rapidly.

I could go on at length about specifics but i'll leave that to your local security list.  No one except no one should be in sudoers except those that consistently need root privs and use them responsibly.  Preferably trusted humans!

lars ebeling wrote:
You should add user hobbit to sudoers.
 Lars

    ----- Original Message -----
    *From:* David Gilmore <mailto:user-70507ff7198d@xymon.invalid>
    *To:* user-ae9b8668bcde@xymon.invalid <mailto:user-ae9b8668bcde@xymon.invalid>
    *Sent:* Wednesday, January 18, 2006 7:29 PM
    *Subject:* [hobbit] Some newbie help

    Can anyone help out a Linux newb with this error?
         Execution of '/usr/local/sbin/fping -Ae' failed - program not suid
    root?

    I am migrating our monitoring from BB installed on Windows to
    Hobbit on Linux.  I was able to successfully install FC4, all of
    the Hobbit subcomponents, and Hobbit.  Just this one error has me
    stumped.  I thought I corrected it by adding hobbit to the WHEEL
    group on FC and then editing sudoers file to uncomment WHEEL, but
    I still have the error.
         David Gilmore
    Consultant
    Stenhouse Consulting, LLC.
    X Traverse St
    Providence, RI   XXXXX
    XXX.XXX.XXXX
    XXX.XXX.XXXX (fax)