155929 – net-analyzer/nagios-plugins - check_icmp module works only as setuid root

Bug 155929 - net-analyzer/nagios-plugins - check_icmp module works only as setuid root

Summary: net-analyzer/nagios-plugins - check_icmp module works only as setuid root

Status:	RESOLVED FIXED

Alias:	None

Product:	Gentoo Linux
Classification:	Unclassified
Component:	Current packages (show other bugs)
Hardware:	All Linux

Importance:	High minor (vote)
Assignee:	Gentoo Netmon project

URL:
Whiteboard:
Keywords:

Depends on:
Blocks:	172480
	Show dependency tree

Reported:	2006-11-22 03:38 UTC by Paul Tobias
Modified:	2007-05-08 21:59 UTC (History)
CC List:	1 user (show)

See Also:
Package list:
Runtime testing required:	---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.

Description Paul Tobias 2006-11-22 03:38:57 UTC

I'm using check_icmp module and have check_host linked to it. In order for the plugin to function correctly it must, like the /bin/ping program, be run as the user root. So i gave him setuid root manually. When i re-emerged nagios-plugins the binary got overwritten with a non-setuid one. And my nagios host check stopped working.
I know people dont always like setuid root programs, but there is no point in having check_icmp without suid root.

have a nice day, bud

Comment 1 Paul Tobias 2007-03-22 20:03:47 UTC

Hi,

I got this again with the update to the new nagios-plugins version. So when you get:
check_icmp: Failed to obtain ICMP socket: Operation not permitted
it can be fixed by:
chown root /usr/nagios/libexec/check_icmp
chmod 4711 /usr/nagios/libexec/check_icmp
and to check if its working:
sudo -u nagios /usr/nagios/libexec/check_icmp localhost

Have a nice day, bud

Comment 2 Tobias Scherbaum (RETIRED) gentoo-dev

2007-05-08 21:59:48 UTC

Fixed in nagios-plugins-1.4.8