Icinga: Do not ship event handlers for Nagios

These are owned (hence being writable) by "nobody", posing a potential
security risk. Since the files itself were already exluded from being
shipped, their parent directory should be as well.

This patch should reduce the amount of executable files being owned by
nobody to zero after upgrading to Core Update 157. Due to complexity
reasons, not all applications available in Pakfire could be tested,
though, so your mileage may vary.

Signed-off-by: Peter Müller <peter.mueller@ipfire.org>
Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
This commit is contained in:
Peter Müller
2021-05-21 15:42:36 +02:00
committed by Michael Tremer
parent b6e3a3eec9
commit 2b51f53cfd
2 changed files with 2 additions and 2 deletions

View File

@@ -25,7 +25,7 @@ usr/bin/icinga
usr/bin/icingastats
#usr/lib/icinga
usr/lib/icinga/p1.pl
usr/lib/nagios/plugins/eventhandlers
#usr/lib/nagios/plugins/eventhandlers
#usr/lib/nagios/plugins/eventhandlers/disable_active_service_checks
#usr/lib/nagios/plugins/eventhandlers/disable_notifications
#usr/lib/nagios/plugins/eventhandlers/distributed-monitoring

View File

@@ -32,7 +32,7 @@ DL_FROM = $(URL_IPFIRE)
DIR_APP = $(DIR_SRC)/$(THISAPP)
TARGET = $(DIR_INFO)/$(THISAPP)
PROG = icinga
PAK_VER = 4
PAK_VER = 5
DEPS = nagios-plugins