Skip to content

Script to check smokeping webserver ACLs

Avinash H. Duduskar edited this page Mar 13, 2019 · 7 revisions

TLDR; Try this one liner, replacing the path to your Smokeping config file as appropriate - getfacl $(grep -E 'imgcache|datadir|piddir' /usr/local/etc/smokeping/config | awk -F'=' '{print }')

How do I check my smokeping/web server ACLs?

Try adding the path to your smokeping config in this shell script to review ACL/permissions - smokeperms.sh

This is what correct ACLs on a FreeBSD system look like assuming smokeping runs as user smokeping:smokeping and the webserver runs as user www:www:

$ ./smokeperms.sh
# file: /usr/local/www/nginx/smokeping/cache
# owner: smokeping
# group: www
user::rwx
group::r-x
other::r-x
# file: /usr/local/www/nginx/smokeping/data
# owner: smokeping
# group: www
user::rwx
group::r-x
other::r-x
# file: /usr/local/var/smokeping
# owner: smokeping
# group: smokeping
user::rwx
group::r-x
other::r-x

Note how /usr/local/www/nginx/smokeping/cache and /usr/local/www/nginx/smokeping/data have the owner set to user smokeping but the group is www -- this is key to letting both Smokeping and your webserver write to the RRDs/Directory. Happy graphing!