[Pkg-nagios-devel] Bug#683879: pnp4nagios-bin: process_perfdata.cfg shouldn't be world readable

Christoph Anton Mitterer calestyo at scientia.net
Sun Aug 5 02:42:23 UTC 2012

Package: pnp4nagios-bin
Version: 0.6.16-1
Severity: important
Tags: security


Marking as severity important as it might have security implications.

process_perfdata.cfg shouldn't be world-readable.
Event though not used per default in Debian, it contains the "KEY"
option which may be used (in alternative to "KEY_FILE") to hold
the Gearman shared secret.


More information about the Pkg-nagios-devel mailing list