Здесь показаны различия между двумя версиями данной страницы.
| Предыдущая версия справа и слева Предыдущая версия Следующая версия | Предыдущая версия | ||
| freebsd:cacti [2021/11/13 16:53] alex | freebsd:cacti [2021/11/13 16:54] (текущий) alex | ||
|---|---|---|---|
| Строка 301: | Строка 301: | ||
| to either files owned by the poller account, and in cases where someone runs the Cacti poller as root, can | to either files owned by the poller account, and in cases where someone runs the Cacti poller as root, can | ||
| compromise the operating system allowing attackers to exploit your infrastructure. | compromise the operating system allowing attackers to exploit your infrastructure. | ||
| - | + |  | |
| Therefore, several versions ago, Cacti was enhanced to provide Whitelist capabilities on the these types of Data | Therefore, several versions ago, Cacti was enhanced to provide Whitelist capabilities on the these types of Data | ||
| - | Input Methods. Though this does secure Cacti more thouroughly, it does increase the amount of work required by the Cacti administrator to import and manage Templates and Packages. | + | Input Methods. Though this does secure Cacti more thouroughly, it does increase the amount of work required by | 
| + | the Cacti administrator to import and manage Templates and Packages. | ||
|  |  | ||
| The way that the Whitelisting works is that when you first import a Data Input Method, or you re-import a Data | The way that the Whitelisting works is that when you first import a Data Input Method, or you re-import a Data | ||
| Строка 309: | Строка 310: | ||
| Data Sources will be immediatly disabled until the administrator validates that the Data Input Method is valid. | Data Sources will be immediatly disabled until the administrator validates that the Data Input Method is valid. | ||
|  |  | ||
| - | To make identifying Data Input Methods in this state, we have provided a validation script in Cacti's CLI directory that can be run with the following options: | + | To make identifying Data Input Methods in this state, we have provided a validation script in Cacti's CLI | 
| + | directory that can be run with the following options: | ||
|  |  | ||
| php -q input_whitelist.php --audit - This script option will search for any Data Input Methods that are currently  | php -q input_whitelist.php --audit - This script option will search for any Data Input Methods that are currently  | ||