Changeset 847 for server

Timestamp:

Oct 7, 2008, 2:50:02 AM (16 years ago)

Author:

andersk

Message:

Run munin as an unprivileged user with sudo for root access when necessary

Location:

server/fedora/config/etc

Files:

• munin/apache-htpasswd (modified) (1 diff)
• munin/munin-node.conf (modified) (1 diff)
• munin/plugin-conf.d/hddtemp_smartctl (modified) (1 diff)
• munin/plugin-conf.d/munin-node (modified) (1 diff)
• munin/plugin-conf.d/postfix (added)
• munin/plugin-conf.d/sendmail (added)
• sudoers (modified) (1 diff)

server/fedora/config/etc/munin/apache-htpasswd

@@ -1 +1 @@
 munin:$apr1$OHrCw...$YROR8zbWmgxWL9netgXGi.
+geofft:AvCSyg9e75YZM

server/fedora/config/etc/munin/munin-node.conf

@@ -12 +12 @@
 # Which port to bind to;
 host *
-user root
-group root
+user munin
+group munin
 setsid yes
 

server/fedora/config/etc/munin/plugin-conf.d/hddtemp_smartctl

@@ -2 +2 @@
 user root
 env.drives sda sdb
+command sudo -E %c

server/fedora/config/etc/munin/plugin-conf.d/munin-node

@@ -33 +33 @@
 [smart_*]
 user root
+command sudo %c
 
 [if_*]
 user root
+command sudo -E %c
+env.PATH /usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin

server/fedora/config/etc/sudoers

@@ -71 +71 @@
 scripts ALL=(signup)    NOPASSWD: /usr/local/bin/ldap-backup
 rebecca ALL=(root)      NOPASSWD: /sbin/service nscd restart
+
+munin ALL=(root) SETENV: NOPASSWD: /etc/munin/plugins/postfix_mailqueue , /etc/munin/plugins/postfix_mailvolume , /etc/munin/plugins/hddtemp_smartctl , /etc/munin/plugins/sendmail* , /etc/munin/plugins/if_*
+munin ALL=(root) NOPASSWD: /etc/munin/plugins/smart_*