summaryrefslogtreecommitdiff
path: root/puppet/modules/site_check_mk/manifests
diff options
context:
space:
mode:
authorvarac <varacanero@zeromail.org>2014-02-25 16:27:57 +0100
committervarac <varacanero@zeromail.org>2014-02-27 18:12:15 +0100
commit40b13221967368060773af008f791ca7a053d18d (patch)
treea47f259f96fb59e220851b15b053086a28f7736a /puppet/modules/site_check_mk/manifests
parent42512cc9428afcd7d949e373e75da4f0d9fc8086 (diff)
set /usr/lib/nagios/plugins/check_icmp to setuid root (Feature #5171)
Diffstat (limited to 'puppet/modules/site_check_mk/manifests')
-rw-r--r--puppet/modules/site_check_mk/manifests/server.pp7
1 files changed, 7 insertions, 0 deletions
diff --git a/puppet/modules/site_check_mk/manifests/server.pp b/puppet/modules/site_check_mk/manifests/server.pp
index 4bbeb850..0c98cd5a 100644
--- a/puppet/modules/site_check_mk/manifests/server.pp
+++ b/puppet/modules/site_check_mk/manifests/server.pp
@@ -44,6 +44,13 @@ class site_check_mk::server {
content => "${type} ${pubkey} monitor",
owner => 'nagios',
mode => '0644';
+ # check_icmp must be suid root or called by sudo
+ # see https://leap.se/code/issues/5171
+ '/usr/lib/nagios/plugins/check_icmp':
+ mode => '4755',
+ require => Package['nagios-plugins-basic'];
}
+
+
include check_mk::agent::local_checks
}