Remove requirement of /tmp needing exec mount option please

This support forum board is for support questions relating to Nagios XI, our flagship commercial network monitoring solution.
Locked
PeaceCorpsLinuxTeam
Posts: 2
Joined: Mon Apr 12, 2021 7:37 am

Remove requirement of /tmp needing exec mount option please

Post by PeaceCorpsLinuxTeam »

During a recent new Nagios XI server installation via the RPMs/yum repository, my installation was failing silently. The yum install would report that it completed successfully, but when I proceeded to the finalization setup items, nothing was working as expected. After a Quickstart session, we eventually discovered the problem was that our security hardening setup sets the noexec mount option on /tmp. So the workaround was easy enough, I just temporarily remounted /tmp with the exec option and the rpm/yum install was successful (I did not try to recover the failed install, but had rather reverted my VM snapshot from prior to the install).

This isn't a huge issue and I have a workaround already, but it will be annoying to have to remember to flip that mount option every time I update Nagios XI via yum/rmp, and to increase security I would request that this requirement be removed. I suggest simply running all post rpm install scripts from the /usr/local/nagios/ directory instead of /tmp.

This install was of the most recent version of Nagios XI via the Nagios yum repository to an Oracle Linux 7.9 x64 server, but I assume any distro with the noexec mount option set on /tmp would experience the same via the RPM install.

Thanks!

Will
ssax
Dreams In Code
Posts: 7682
Joined: Wed Feb 11, 2015 12:54 pm

Re: Remove requirement of /tmp needing exec mount option ple

Post by ssax »

I've submitted the request to development on your behalf:

Code: Select all

FR: XI - Add RPM install/upgrade support for systems with noexec enabled on /tmp - Currently they silently fail
Please keep in mind that the decision to implement the enhancement is at the discretion of our development team.
Locked