Search found 19 matches
- Thu Nov 11, 2021 5:43 am
- Forum: Nagios Network Analyzer
- Topic: MariaDB vulnerabilities
- Replies: 1
- Views: 4820
MariaDB vulnerabilities
Good morning, This relates to https://support.nagios.com/forum/viewtopic.php?f=16&t=63937&p=338012 I've followed the instructions to harden our instance of MariaDB and most steps have worked successfully. However when I update the permissions on /var/www/html/nagiosna/application/config/conf...
- Wed Nov 10, 2021 2:27 pm
- Forum: Nagios XI
- Topic: MariaDB vulnerabilities
- Replies: 9
- Views: 1189
Re: MariaDB vulnerabilities
That's great, thank you for the explanation. For now we'll update /usr/local/nagiosxi/scripts/reset_config_perms.sh and make a note this change will need applying following any upgrade. Would you consider making this change a permanent feature of Nagios XI? It seems a sensible idea to protect the cl...
- Wed Nov 10, 2021 10:57 am
- Forum: Nagios XI
- Topic: MariaDB vulnerabilities
- Replies: 9
- Views: 1189
Re: MariaDB vulnerabilities
Hi,
It appears our messages crossed in the ether! This is a polite bump to ensure my last comment was seen.
Regards,
Neville
It appears our messages crossed in the ether! This is a polite bump to ensure my last comment was seen.
Regards,
Neville
- Wed Nov 10, 2021 10:52 am
- Forum: Nagios XI
- Topic: MariaDB vulnerabilities
- Replies: 9
- Views: 1189
Re: MariaDB vulnerabilities
Hi, I'll post any follow-ups in the relevant forums. I've changed the file permissions on our test XI host as recommended, but we've noticed the permissions on some of them have reverted to their original settings: $ ls -l /usr/local/nagiosxi/scripts/restore_xi.sh -rwxr-xr-x 1 nagios nagios 15301 No...
- Tue Nov 09, 2021 12:24 pm
- Forum: Nagios XI
- Topic: MariaDB vulnerabilities
- Replies: 9
- Views: 1189
Re: MariaDB vulnerabilities
Many thanks for the quick and comprehensive response, and apologies for posting it all in the XI forum.
We'll make these changes on our trial system in readiness for our production deployment.
Regards,
Neville
We'll make these changes on our trial system in readiness for our production deployment.
Regards,
Neville
- Mon Nov 08, 2021 2:55 pm
- Forum: Nagios XI
- Topic: MariaDB vulnerabilities
- Replies: 9
- Views: 1189
MariaDB vulnerabilities
Good evening, As part of our trial of the Nagios products we’re required to subject the products to various security scans. I’ve come across some vulnerabilities of varying severities relating the instances of MariaDB. We’ve installed Nagios on CentOS using the manual installation method. Nagios XI ...
- Tue Sep 28, 2021 10:08 am
- Forum: Nagios XI
- Topic: Naming of auto configured Unconfigured Objects
- Replies: 4
- Views: 338
Re: Naming of auto configured Unconfigured Objects
Thank you very much, that worked perfectly. I'm not sure how I missed that!
- Mon Sep 27, 2021 5:38 am
- Forum: Nagios XI
- Topic: Naming of auto configured Unconfigured Objects
- Replies: 4
- Views: 338
Re: Naming of auto configured Unconfigured Objects
Thanks for the response. I can confirm dns_enable is set to 1. nslookup returns a result, plus the host is in /etc/hosts: $ nslookup 10.29.74.76 76.74.29.10.in-addr.arpa name = pcen-td-01.<redacted>. $ grep 10.29.74.76 /etc/hosts 10.29.74.76 pcen-TD-01 I'll PM you the file requested in the next few ...
- Thu Sep 23, 2021 10:58 am
- Forum: Nagios XI
- Topic: Naming of auto configured Unconfigured Objects
- Replies: 4
- Views: 338
Naming of auto configured Unconfigured Objects
Good afternoon, We have enabled the Auto Configure settings for Unconfigured Objects: https://i.imgur.com/P2cFKit.png We've done this so that new services are created should we receive SNMP traps from a new device, or if we receive an SNMP trap with a new service name (see https://support.nagios.com...
- Tue Sep 14, 2021 4:26 am
- Forum: Nagios XI
- Topic: Newly created services not being impacted by SNMP traps
- Replies: 5
- Views: 399
Re: Newly created services not being impacted by SNMP traps
Thank you very much for the confirmation Perry. We’ll keep our fingers crossed for the feature request!