Be careful there,

The mrtg config file usually holds your snmp passwords. You don't want
those to be publicly readable.

As an alternative you might want to use SUID (Set User ID) on the cgi
file.

You could for instance make the 14all.cgi script be owned by root and
make it run with the rights of it's owner (which is root).

Do it like this:

su
chown root.root 14all.cgi
chmod 455 14all.cgi

Be sure to read up on what security impacts SUID can have.

Serge Maandag 

> 14all.cgi is started from the webserver.  The webserver most likely
> runs as user "nobody", "noone", or "www".
> 
> > So it's a right issue. But I don't exactly know which 
> account does have to
> > have which rights....
> 
> Why not give read permission to all of your MRTG files to anyone ?
> 
> cheers
> -- 
>    __________________________________________________________________
>  / [EMAIL PROTECTED]                  
> [EMAIL PROTECTED] \
> | work                                                        
>  private |
> | My employer is capable of speaking therefore I speak only 
> for myself |
> +-------------------------------------------------------------
> ---------+
> | Technical questions sent directly to me will be nuked. Use 
> the list. | 
> +-------------------------------------------------------------
> ---------+
> | http://faq.mrtg.org/                                        
>          |
> | http://rrdtool.eu.org  --> tutorial                         
>          |
> +-------------------------------------------------------------
> ---------+
> 
> --
> Unsubscribe 
> mailto:[EMAIL PROTECTED]
> Help        mailto:[EMAIL PROTECTED]
> Archive     http://www.ee.ethz.ch/~slist/rrd-users
> WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi
> 
> 

--
Unsubscribe mailto:[EMAIL PROTECTED]
Help        mailto:[EMAIL PROTECTED]
Archive     http://www.ee.ethz.ch/~slist/rrd-users
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

Reply via email to