[Pkg-cacti-maint] Bug#923309: cacti-spine_1.1.37-2~bpo9+1 fails to run under non-root user

[Sven Hartge]

On 27.02.19 21:35, Paul Gevers wrote:

> @Paul, Thanks for reporting this issue. Please check the existing
> comments in bug 904332
> 
> https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=904332
> 
> @Sven can you please help us and maybe explain how Paul should be using
> the cacti-spine binary with these Linux capabilities enabled that we
> added in that version by your patch. I guess he needs to install
> libcap2-bin and run $(chmod u-s /usr/sbin/spine)

Yes, but one additional step:

You also need to set the capabilities:

   setcap cap_net_raw+ep /usr/sbin/spine

After that, everything should be back in working order.

If not, then the bug is at a different place. Also the missing setuid
bit and the missing capabilities only prevent the use of the
ICMP-Checker for Host Liveliness Checking, but not the failure to run at
all.

Without those two bits in place, SNMP gathering will still work.

Grüße,
Sven.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-cacti-maint/attachments/20190227/195d5c79/attachment-0001.sig>