During a recent new Nagios XI server installation via the RPMs/yum repository, my installation was failing silently. The yum install would report that it completed successfully, but when I proceeded to the finalization setup items, nothing was working as expected. After a Quickstart session, we eventually discovered the problem was that our security hardening setup sets the noexec mount option on /tmp. So the workaround was easy enough, I just temporarily remounted /tmp with the exec option and the rpm/yum install was successful (I did not try to recover the failed install, but had rather reverted my VM snapshot from prior to the install).
This isn't a huge issue and I have a workaround already, but it will be annoying to have to remember to flip that mount option every time I update Nagios XI via yum/rmp, and to increase security I would request that this requirement be removed. I suggest simply running all post rpm install scripts from the /usr/local/nagios/ directory instead of /tmp.
This install was of the most recent version of Nagios XI via the Nagios yum repository to an Oracle Linux 7.9 x64 server, but I assume any distro with the noexec mount option set on /tmp would experience the same via the RPM install.
Thanks!
Will
Remove requirement of /tmp needing exec mount option please
-
PeaceCorpsLinuxTeam
- Posts: 2
- Joined: Mon Apr 12, 2021 7:37 am
Re: Remove requirement of /tmp needing exec mount option ple
I've submitted the request to development on your behalf:
Please keep in mind that the decision to implement the enhancement is at the discretion of our development team.
Code: Select all
FR: XI - Add RPM install/upgrade support for systems with noexec enabled on /tmp - Currently they silently fail