Removing extraneous certs from the /tmp directory on NCPA start

NagiosEnterprises / ncpa

Nagios Cross-Platform Agent

Other

176 stars 95 forks source link

Removing extraneous certs from the /tmp directory on NCPA start #1051

Closed ne-bbahn closed 7 months ago

ne-bbahn commented 7 months ago

When you restart NCPA, it creates temporary certs in the /tmp folder that aren't cleaned up until system reboot. This removes them when you restart NCPA.

pittagurneyi commented 7 months ago

I believe there are two cases:

It runs via systemd and has PrivateTmp set, then this doesn't bother me.
It doesn't run via systemd and as root and then just removing files of this pattern /tmp/tmp*cacert.pem is not really the best idea. I mean the chances that another program or user uses that pattern for such files is relatively slim, but still not ideal.

Do you happen to know where the temporary certs are created and why? There has to be a better way to resolve this.

What do you think?

ne-bbahn commented 7 months ago

After investigating, it seems that the file is created by python's _common.py and the reason they accumulate is due to permission errors. I don't think this is a solution, so I'm closing it and will investigate more how to fix the issue properly.