Nagios & Jail

[Bjoern A. Zeeb]

On Tue, 6 Jan 2009, Albert Shih wrote:

> In fact I found the problem :
>
> When I compile nagios-plugin ports in a jail the «configure» don't find
> syntax of ping :
>
> checking for ping... /sbin/ping
> checking for ping6... /sbin/ping6
> checking for ICMP ping syntax... configure: WARNING: unable to find usable ping syntax
>
> But if I compile the same ports in a «normal» server (both are amd64).
>
> checking for ping... /sbin/ping
> checking for ping6... /sbin/ping6
> checking for ICMP ping syntax... /sbin/ping -n -c %d %s
> checking for ICMPv6 ping syntax... /sbin/ping6 -n -c %d %s
>
> So if I use the check_ping produce by compiling in a no-jail server on a
> jail-server it's working.
>
> I think it's a bug about the nagios-plugins ports. What you think ?

I think most of all configure stuff out there is ... ok, if you
compile the port inside a jail and permit raw sockets, does it work
then -- 
either by using the rc.conf option and restarting the jail with
rc.d/jail or using sysctl security.jail.allow_raw_sockets=1  ?

It smells it tries to execute a ping command and that does not
succeed.

/bz

-- 
Bjoern A. Zeeb                      The greatest risk is not taking one.