search

NagiosEnterprises / ndoutils

NDOUtils - Database Output for Nagios Core
GNU General Public License v2.0
48 stars 21 forks source link

Secure executable permissions #65

Closed orlitzky closed 1 month ago

orlitzky commented 6 months ago

Installing executables as nagios:nagios (the default) is a security issue on a typical system where those executables will wind up in everyone's PATH. In these two commits I simply delete the special handling, letting all executables be installed mode 755 with the owner unchanged. (This would result in root:root ownership for a "normal" /usr/bin install.)

sawolf commented 6 months ago

Thanks for the patch! This looks good to me.

orlitzky commented 6 months ago

Thanks! I thought I had fixed this in nagios-core, too, but now that I look back the issue sort of stalled: https://github.com/NagiosEnterprises/nagioscore/issues/424