Hi Michael,

I'm sorry, I should have been a little bit more clear about this. The
zabbix_agentd process runs as zabbix:zabbix indeed, but the so called
"UserParameter" scripts run with user:group zabbix:root. Or at least,
this is the output of such a script calling `id`:
> uid=110(zabbix) gid=111(zabbix) groups=0(root)
Where is the 'root' group coming from? The user 'zabbix' certainly is
_not_ in the group 'root' on my servers!

So you're right: this bug is actually not related to the zabbix_agentd
process, but to the scripts invoked by that process. The same holds for
the problem with additional groups. Check the output of `id zabbix`
invoked on a simple root shell and compare it to the output of the
UserParameter script:
> uid=110(zabbix) gid=111(zabbix) groups=111(zabbix),4(adm)
Note that the user 'zabbix' actually is in the group 'adm': this way it
is able to read mail logfiles from /var/log. However, the group 'adm'
has disappeared from the `id` output from the UserParameter script?

Regards!




-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to