[Pkg-nagios-devel] Bug#289879: marked as done (nagios-plugins: check_dhcp needs suid root)

Debian Bug Tracking System owner at bugs.debian.org
Mon Oct 31 22:48:12 UTC 2005

Your message dated Mon, 31 Oct 2005 14:32:13 -0800
with message-id <E1EWiCL-0006nm-00 at spohr.debian.org>
and subject line Bug#289879: fixed in nagios-plugins 1.4.2-5
has caused the attached Bug report to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere.  Please contact me immediately.)

Debian bug tracking system administrator
(administrator, Debian Bugs database)

Received: (at submit) by bugs.debian.org; 11 Jan 2005 15:04:55 +0000
>From mmoore at novator.com Tue Jan 11 07:04:55 2005
Return-path: <mmoore at novator.com>
Received: from tor149-99-58-114.dedicated.sprintdsl.ca (mail.novator.com) [] 
	by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
	id 1CoNZm-0000rH-00; Tue, 11 Jan 2005 07:04:55 -0800
Received: from mnemosyne.int.novator.com ([])
	by mail.novator.com with esmtp (Exim 3.35 #1 (Debian))
	id 1CoNZl-0002ge-00
	for <submit at bugs.debian.org>; Tue, 11 Jan 2005 10:04:53 -0500
Received: from mmoore by mnemosyne.int.novator.com with local (Exim 3.35 #1 (Debian))
	id 1CoNZl-0007Qj-00; Tue, 11 Jan 2005 10:04:53 -0500
From: Moses Moore <mmoore at Mnemosyne.int.novator.com>
To: Debian Bug Tracking System <submit at bugs.debian.org>
Subject: nagios-plugins: check_dhcp needs suid root
X-Mailer: reportbug 1.50
Date: Tue, 11 Jan 2005 10:04:52 -0500
Message-Id: <E1CoNZl-0007Qj-00 at mnemosyne.int.novator.com>
Sender: Moses Moore <mmoore at novator.com>
Delivered-To: submit at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-8.0 required=4.0 tests=BAYES_00,HAS_PACKAGE 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02

Package: nagios-plugins
Severity: minor

"...Note that the plugin *must* best installed suid root in order to
run, as it binds to a privileged port (UDP 67) in order to listen to
DHCPOFFER packets. "

I understand why it shouldn't be setuid root out-of-the-box, but the
user should be warned that check_dhcp won't work unless it's setuid
root.  I didn't find mention of this in /usr/share/doc/nagios-plugins/*

Do any other plugins require setuid root to work?

-- System Information
Debian Release: 3.0
Architecture: i386
Kernel: Linux mnemosyne 2.4.26-server-p3 #1 SMP Wed May 19 13:41:54 EDT 2004 i686

Versions of packages nagios-plugins depends on:
ii  bind9-host             1:9.2.1-2.woody.1 Version of 'host' bundled with BIN
ii  bind9-host [host]      1:9.2.1-2.woody.1 Version of 'host' bundled with BIN
ii  dnsutils               1:9.2.1-2.woody.1 Clients provided with BIND
ii  fping                  2.4b2-to-ipv6-4   Send ICMP ECHO_REQUEST packets to 
ii  libc6                  2.2.5-11.5        GNU C Library: Shared libraries an
ii  libldap2               2.0.23-7.2        OpenLDAP libraries.
ii  libmysqlclient10       3.23.49-8.7       mysql database client library
ii  libnet-snmp-perl       3.6-7             Script SNMP connections
ii  libpgsql2              7.2.1-2woody5     Shared library libpq.so.2 for Post
ii  libssl0.9.6            0.9.6c-2.woody.6  SSL shared libraries
ii  netkit-ping [ping]     0.10-9            The ping utility from netkit
ii  ntp-simple             1:4.1.0-8         NTP v4 daemon for simple systems.
ii  ntpdate                1:4.1.0-8         The ntpdate client for setting sys
ii  procps                 1:2.0.7-8.woody1  The /proc file system utilities.
ii  qstat                  2.4e-1            Command-line tool for querying qua
ii  smbclient              3.0.7-1           a LanManager-like simple client fo
ii  snmp                   4.2.3-2           NET SNMP (Simple Network Managemen

Received: (at 289879-close) by bugs.debian.org; 31 Oct 2005 22:39:47 +0000
>From katie at spohr.debian.org Mon Oct 31 14:39:47 2005
Return-path: <katie at spohr.debian.org>
Received: from katie by spohr.debian.org with local (Exim 3.36 1 (Debian))
	id 1EWiCL-0006nm-00; Mon, 31 Oct 2005 14:32:13 -0800
From: sean finney <seanius at debian.org>
To: 289879-close at bugs.debian.org
X-Katie: $Revision: 1.56 $
Subject: Bug#289879: fixed in nagios-plugins 1.4.2-5
Message-Id: <E1EWiCL-0006nm-00 at spohr.debian.org>
Sender: Archive Administrator <katie at spohr.debian.org>
Date: Mon, 31 Oct 2005 14:32:13 -0800
Delivered-To: 289879-close at bugs.debian.org
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02 
	(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER 
	autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-CrossAssassin-Score: 3

Source: nagios-plugins
Source-Version: 1.4.2-5

We believe that the bug you reported is fixed in the latest version of
nagios-plugins, which is due to be installed in the Debian FTP archive:

  to pool/main/n/nagios-plugins/nagios-plugins-basic_1.4.2-5_i386.deb
  to pool/main/n/nagios-plugins/nagios-plugins-standard_1.4.2-5_i386.deb
  to pool/main/n/nagios-plugins/nagios-plugins_1.4.2-5.diff.gz
  to pool/main/n/nagios-plugins/nagios-plugins_1.4.2-5.dsc
  to pool/main/n/nagios-plugins/nagios-plugins_1.4.2-5_i386.deb

A summary of the changes between this version and the previous one is

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 289879 at bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
sean finney <seanius at debian.org> (supplier of updated nagios-plugins package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster at debian.org)

Hash: SHA1

Format: 1.7
Date: Mon, 31 Oct 2005 22:35:16 +0100
Source: nagios-plugins
Binary: nagios-plugins nagios-plugins-basic nagios-plugins-standard
Architecture: source i386
Version: 1.4.2-5
Distribution: unstable
Urgency: low
Maintainer: Debian Nagios Maintainer Group <pkg-nagios-devel at lists.alioth.debian.org>
Changed-By: sean finney <seanius at debian.org>
 nagios-plugins - Plugins for the nagios network monitoring and management system
 nagios-plugins-basic - Plugins for the nagios network monitoring and management system
 nagios-plugins-standard - Plugins for the nagios network monitoring and management system
Closes: 289879 310780 336639
 nagios-plugins (1.4.2-5) unstable; urgency=low
   * Sean Finney
     - add documentation to README.Debian about the plugins needing setuid
       root, why we don't install them setuid root by default, and some
       recommended methods for dealing with this (closes: #289879).
     - add documentation to README.Debian about the new package split.
     - config.h_debiandefaults.dpatch now modifies common.h instead of
       config.h.in, because the latter would sometimes cause build hosts
       to spontaneously regenerate the file, overwriting our changes.
       since all the plugins include common.h too... (closes: #336639).
     - include some patches from "F.A.G. Luteijn" <f.a.g.luteijn at knoware.nl>:
       * dhcp.cfg (with notes added by me about needing setuid)
       * disk.cfg (check_all_disks)
       * disk-smb.cfg (seperated check_disk_smb commands)
       * http.cfg (check_https_auth)
       * check_disk_smb: allow checking disk usage via host addresses.
       (closes: #310780).
 3e1917c84548ad959f9aa4b1eea98e93 1018 net extra nagios-plugins_1.4.2-5.dsc
 dfce37f36acc8d9f4ddf2a85a9bc8d50 37776 net extra nagios-plugins_1.4.2-5.diff.gz
 73601b58b900fdd27de7fe7a0f46dc75 63306 net extra nagios-plugins_1.4.2-5_i386.deb
 d1c93b395a05e72997d9e40d667edab6 264646 net extra nagios-plugins-basic_1.4.2-5_i386.deb
 6eabd7fa8d8c00543834e89885a52c91 148004 net extra nagios-plugins-standard_1.4.2-5_i386.deb

Version: GnuPG v1.4.2 (GNU/Linux)


More information about the Pkg-nagios-devel mailing list