[dev.icinga.com #4444] Installation/Packages: set cmd group permissions on ext cmd pipe / livestatus unix socket

[icinga-migration]

This issue has been migrated from Redmine: https://dev.icinga.com/issues/4444

Created by mfriedrich on 2013-07-22 12:38:59 +00:00

Assignee: mfriedrich
Status: Resolved (closed on 2013-09-27 18:22:32 +00:00)
Target Version: 0.0.3
Last Update: 2013-09-27 18:22:32 +00:00 (in Redmine)

---

1. create a seperate directory
2. mask g+rws
3. put compat external command / livestatus unix socket there

2a) for tarball: make install with command opts (user/group with apache user in icingacmd group) and

chmod g+s /var/run/icinga2/rw/{icinga2.cmd,livestatus}

2b) packages:

%attr(2755,icinga,icingacmd) %{_localstatedir}/spool/%{name}/rw

Changesets

2013-09-27 17:39:23 +00:00 by (unknown) e8a019d

ExternalCommandListener: Reset umask to preserve group write permissions.

refs #4444

2013-09-27 17:39:46 +00:00 by (unknown) 87fa063

LivestatusListener: Set unix socket permissions to 0660.

refs #4444

2013-09-27 17:41:08 +00:00 by (unknown) 9c6b79e

Install /var/run/icinga2/rw command mode, add configure options.

- changed locations for icinga2.cmd and livestatus unix socket
- make install creates /var/run/icinga2/rw and sets g+s for
  icinga:icingacmd
- configure options: --with-icinga[cmd]-{user,group}=
- add autoconf macros to check user/group and bail early if not created
- update documentation/INSTALL

fixes #4444
refs #3186

---

Relations:

• relates #4444
• relates #4444
• duplicates #4444

[icinga-migration]

Updated by mfriedrich on 2013-09-23 09:40:32 +00:00

• Target Version changed from 130 to 0.0.3

[icinga-migration]

Updated by mfriedrich on 2013-09-23 14:24:14 +00:00

• Category set to Installation

[icinga-migration]

Updated by mfriedrich on 2013-09-23 15:49:54 +00:00

• Status changed from New to Assigned
• Assigned to set to mfriedrich

[icinga-migration]

Updated by mfriedrich on 2013-09-27 14:11:53 +00:00

- configure
- make install
- icingacmd g+s on /var/run/icinga2/rw
- documentation for adding apache user into icingacmd group

[icinga-migration]

Updated by mfriedrich on 2013-09-27 14:49:40 +00:00

• Priority changed from Normal to High

[icinga-migration]

Updated by mfriedrich on 2013-09-27 15:23:33 +00:00

ensure within init script that /var/run/icinga2/rw is available on startup - at least in opensuse /var/run is transitional.

[icinga-migration]

Updated by Anonymous on 2013-09-27 18:22:32 +00:00

• Status changed from Assigned to Resolved
• Done % changed from 0 to 100

Applied in changeset 9c6b79e.