Remove requirement of /tmp needing exec mount option please
Posted: Mon Apr 12, 2021 8:06 am
During a recent new Nagios XI server installation via the RPMs/yum repository, my installation was failing silently. The yum install would report that it completed successfully, but when I proceeded to the finalization setup items, nothing was working as expected. After a Quickstart session, we eventually discovered the problem was that our security hardening setup sets the noexec mount option on /tmp. So the workaround was easy enough, I just temporarily remounted /tmp with the exec option and the rpm/yum install was successful (I did not try to recover the failed install, but had rather reverted my VM snapshot from prior to the install).
This isn't a huge issue and I have a workaround already, but it will be annoying to have to remember to flip that mount option every time I update Nagios XI via yum/rmp, and to increase security I would request that this requirement be removed. I suggest simply running all post rpm install scripts from the /usr/local/nagios/ directory instead of /tmp.
This install was of the most recent version of Nagios XI via the Nagios yum repository to an Oracle Linux 7.9 x64 server, but I assume any distro with the noexec mount option set on /tmp would experience the same via the RPM install.
Thanks!
Will
This isn't a huge issue and I have a workaround already, but it will be annoying to have to remember to flip that mount option every time I update Nagios XI via yum/rmp, and to increase security I would request that this requirement be removed. I suggest simply running all post rpm install scripts from the /usr/local/nagios/ directory instead of /tmp.
This install was of the most recent version of Nagios XI via the Nagios yum repository to an Oracle Linux 7.9 x64 server, but I assume any distro with the noexec mount option set on /tmp would experience the same via the RPM install.
Thanks!
Will