Nagios process can execute a OS command at HOSTNOTES macro.

Support forum for Nagios Core, Nagios Plugins, NCPA, NRPE, NSCA, NDOUtils and more. Engage with the community of users including those using the open source solutions.
Locked
momota
Posts: 1
Joined: Mon Jul 02, 2018 1:37 am

Nagios process can execute a OS command at HOSTNOTES macro.

Post by momota »

nagios.cfg:

Code: Select all

illegal_macro_output_chars=`~$&|'"<>

hosts.cfg:

Code: Select all

       notes                           `date +%Y%m%d` `sudo reboot`
nagios.debug:
[1607933320.775941] [001.0] [pid=1249928] process_macros_r()
[1607933320.775944] [2048.1] [pid=1249928] **** BEGIN MACRO PROCESSING ***********
[1607933320.775947] [2048.1] [pid=1249928] Processing: '`date +%Y%m%d` `sudo reboot`'
[1607933320.775949] [2048.2] [pid=1249928] Processing part: '`date +%Y%m%d` `sudo reboot`'
[1607933320.775952] [2048.2] [pid=1249928] Not currently in macro. Running output (28): '`date +%Y%m%d` `sudo reboot`'
[1607933320.775955] [2048.1] [pid=1249928] Done. Final output: '`date +%Y%m%d` `sudo reboot`'
[1607933320.775958] [2048.1] [pid=1249928] **** END MACRO PROCESSING *************
[1607933320.775961] [2048.2] [pid=1249928] Adding macro "HOSTNOTES" with value "`date +%Y%m%d` `sudo reboot`" to kvvec
in root mailbox:
From [email protected] Mon Dec 14 17:09:35 2020
Return-Path: <[email protected]>
X-Original-To: root
Delivered-To: [email protected]
To: [email protected]
From: [email protected]
Auto-Submitted: auto-generated
Subject: *** SECURITY information for localhost ***
Date: Mon, 14 Dec 2020 17:09:35 +0900 (JST)
Status: RO

localhost : Dec 14 17:09:35 : nagios : user NOT in sudoers ; TTY=unknown ; PWD=/tmp ; USER=root ; COMMAND=/sbin/reboot
I think it's better to cover by illegal_macro_output_chars, how about it? :?
Locked