[Pkg-nagios-devel] Bug#719698: nagvis: Nagvis is unable to create auth.db unless owner of config directory is changed to www-data

[Markus Frosch]

Control: tags -1 unreproducible

Hey Patrick,
I'm working on adopting the nagvis package and want to clean old bugs.

> After a fresh install of Nagvis in wheezy, the /etc/nagvis directory is 
> owned by root.
> If you go the the nagvis webinterface on http://<ip>/nagvis, it will 
> complain that it can't create the auth.db file.
> # chown www-data:www-data /etc/nagvis, solves this. But I'm not sure if 
> this is as intended
> and if it's a good idea regarding security. Anyhow nagvis doesn't work 
> out of the box and it's not an obvious fix.

I can't really reproduce the problem.

When installing Nagvis on either Wheezy or Jessie the permissions are
correct:

$ ls -al /etc/nagvis/
total 56
drwxr-xr-x   7 www-data www-data  4096 Dez  12 23:25 .
drwxr-xr-x 122 root     root     12288 Dez  12 23:25 ..
drwxr-xr-x   2 www-data www-data  4096 Dez  12 23:25 automaps
drwxr-xr-x   2 root     root      4096 Feb  20  2013 conf.d
drwxr-xr-x   2 root     root      4096 Dez  12 23:25 geomap
drwxr-xr-x   2 www-data www-data  4096 Feb  20  2013 maps
-rw-rw----   1 root     www-data 16971 Dez  12 23:25 nagvis.ini.php
drwxr-xr-x   2 www-data www-data  4096 Feb  20  2013 profiles


Could you re-test that in your environment?

Btw. Nagvis 1.7 is coming to unstable soon, this bug will unfortunately
not be fixed in wheezy.

Cheers
Markus

-- 
Markus Frosch
markus at lazyfrosch.de
http://www.lazyfrosch.de
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 490 bytes
Desc: This is a digitally signed message part
URL: <http://lists.alioth.debian.org/pipermail/pkg-nagios-devel/attachments/20131212/299e6606/attachment.sig>