[Pkg-nagios-devel] Bug#831745: Bug#831745: icinga2: file/directory permission issues

[Alexander Wirt]

tag 831745 moreinfo
thanks

Am 18.07.2016 um 23:21 schrieb Christoph Anton Mitterer:
> Source: icinga2
> Version: 2.4.10-1
> Severity: important
> Tags: security
>
>
> Hi.
>
> Several files in Icinga2 are shipped with owner www-data, namely at least
> these:
> /var/cache/icinga2
drwxr-x---  2 nagios   www-data  4096 Jul 18 23:33 icinga2


> /var/log/icinga2
drwxr-s---  4 nagios     www-data        4096 Jul 18 06:36 icinga2

You are wrong.

> /var/log/icinga2/icinga2.log
-rw-r--r-- 1 nagios www-data 630598 Jul 18 23:34 
/var/log/icinga2/icinga2.log

> /var/log/icinga2/icinga2.log.5.xz
> /run/icinga2
> /run/icinga2/cmd
> /run/icinga2/cmd/icinga2.cmd
That one is a must. Otherwise webfrontends are not able to send commands.

So what exactly is your point?