Public bug reported:

using check_raid 4.0.9 from monitoring-plugins-contrib
45.20231212ubuntu2 on a noble system with only linux md raid in use.

Coincidentally or not, the problem occured after upgrading perl from
5.38.2-3.2ubuntu0.1 to 5.38.2-3.2ubuntu0.2.


running /usr/lib/nagios/plugins/check_raid as non root, I get:

  $ /usr/lib/nagios/plugins/check_raid 
  sudo: a password is required
  sudo: a password is required
  OK: mdstat:[md1(9.10 TiB raid1):UU]

plus two security notifications emailed, stating the user tried to run
"/sbin/dmsetup status" and "/sbin/dmsetup status --noflush" without
providing a password.  I then tried the -d and -S switches and got this:


  $ /usr/lib/nagios/plugins/check_raid -dS
  check_raid 4.0.9
  Visit <https://github.com/glensc/nagios-plugin-check_raid#reporting-bugs> how 
to report bugs
  Please include output of **ALL** commands in bugreport

  DEBUG EXEC: /bin/sudo -n -A /sbin/dmsetup status --noflush at 
/usr/lib/nagios/plugins/check_raid line 504.
  sudo: a password is required
  DEBUG EXEC: /bin/sudo -n -A /sbin/dmsetup status at 
/usr/lib/nagios/plugins/check_raid line 504.
  sudo: a password is required
  DEBUG EXEC: /proc/mdstat at /usr/lib/nagios/plugins/check_raid line 504.
  Your configuration does not need to use sudo, sudoers not updated
  check_raid OK - sudoers not updated

I agree, a check on md raid via /proc/mdstat does not need elevated
privileges, but all of a sudden, this script decided to run "dmsetup",
which does need root access?

Sure, I could give the user (nagios) access to run dmsetup via sudo, but
this wasn't needed for years, so I am loath to just give in without a
better explanation.

** Affects: nagios-plugins-contrib (Ubuntu)
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/2119248

Title:
  check_raid should not require "sudo", but does

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nagios-plugins-contrib/+bug/2119248/+subscriptions


-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to