Being such a beginner, I didn't realize I was creating a problem with root...I took your advice and removed "sudo"...is that enough, or is there something else I should do for security?

On 3/7/2021 5:06 AM, Roger Price wrote:
On Sat, 6 Mar 2021, Jon Kinne via Nut-upsuser wrote:

I created a script called "reboot_notify" and saved it in usr/local/bin, and it looks like this:

Yes, good approach to the problem.  In my solution there was an error.  Instead of "@reboot root ups-report &", I should have said "@reboot nut ups-report &". It was bad security to execute as superuser.

# Have the system pause while all the mail elements load,
  sleep 60
# and then run the script:
  sudo /usr/local/bin/reboot_notify

Do you need to get root involved?  If a hacker can substitute his reboot_notify for yours, he gets full control.

Roger

_______________________________________________
Nut-upsuser mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/nut-upsuser

_______________________________________________
Nut-upsuser mailing list
[email protected]
https://alioth-lists.debian.net/cgi-bin/mailman/listinfo/nut-upsuser

Reply via email to