Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[dev.icinga.com #4444] Installation/Packages: set cmd group permissions on ext cmd pipe / livestatus unix socket #674

Closed
icinga-migration opened this Issue Jul 22, 2013 · 7 comments

Comments

Projects
None yet
1 participant
@icinga-migration
Copy link
Member

icinga-migration commented Jul 22, 2013

This issue has been migrated from Redmine: https://dev.icinga.com/issues/4444

Created by mfriedrich on 2013-07-22 12:38:59 +00:00

Assignee: mfriedrich
Status: Resolved (closed on 2013-09-27 18:22:32 +00:00)
Target Version: 0.0.3
Last Update: 2013-09-27 18:22:32 +00:00 (in Redmine)


  1. create a seperate directory
  2. mask g+rws
  3. put compat external command / livestatus unix socket there

2a) for tarball: make install with command opts (user/group with apache user in icingacmd group) and

chmod g+s /var/run/icinga2/rw/{icinga2.cmd,livestatus}

2b) packages:

%attr(2755,icinga,icingacmd) %{_localstatedir}/spool/%{name}/rw

Changesets

2013-09-27 17:39:23 +00:00 by (unknown) e8a019d

ExternalCommandListener: Reset umask to preserve group write permissions.

refs #4444

2013-09-27 17:39:46 +00:00 by (unknown) 87fa063

LivestatusListener: Set unix socket permissions to 0660.

refs #4444

2013-09-27 17:41:08 +00:00 by (unknown) 9c6b79e

Install /var/run/icinga2/rw command mode, add configure options.

- changed locations for icinga2.cmd and livestatus unix socket
- make install creates /var/run/icinga2/rw and sets g+s for
  icinga:icingacmd
- configure options: --with-icinga[cmd]-{user,group}=
- add autoconf macros to check user/group and bail early if not created
- update documentation/INSTALL

fixes #4444
refs #3186

Relations:

@icinga-migration

This comment has been minimized.

Copy link
Member Author

icinga-migration commented Sep 23, 2013

Updated by mfriedrich on 2013-09-23 09:40:32 +00:00

  • Target Version changed from 130 to 0.0.3
@icinga-migration

This comment has been minimized.

Copy link
Member Author

icinga-migration commented Sep 23, 2013

Updated by mfriedrich on 2013-09-23 14:24:14 +00:00

  • Category set to Installation
@icinga-migration

This comment has been minimized.

Copy link
Member Author

icinga-migration commented Sep 23, 2013

Updated by mfriedrich on 2013-09-23 15:49:54 +00:00

  • Status changed from New to Assigned
  • Assigned to set to mfriedrich
@icinga-migration

This comment has been minimized.

Copy link
Member Author

icinga-migration commented Sep 27, 2013

Updated by mfriedrich on 2013-09-27 14:11:53 +00:00

- configure
- make install
- icingacmd g+s on /var/run/icinga2/rw
- documentation for adding apache user into icingacmd group
@icinga-migration

This comment has been minimized.

Copy link
Member Author

icinga-migration commented Sep 27, 2013

Updated by mfriedrich on 2013-09-27 14:49:40 +00:00

  • Priority changed from Normal to High
@icinga-migration

This comment has been minimized.

Copy link
Member Author

icinga-migration commented Sep 27, 2013

Updated by mfriedrich on 2013-09-27 15:23:33 +00:00

ensure within init script that /var/run/icinga2/rw is available on startup - at least in opensuse /var/run is transitional.

@icinga-migration

This comment has been minimized.

Copy link
Member Author

icinga-migration commented Sep 27, 2013

Updated by Anonymous on 2013-09-27 18:22:32 +00:00

  • Status changed from Assigned to Resolved
  • Done % changed from 0 to 100

Applied in changeset 9c6b79e.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
You can’t perform that action at this time.