Здесь показаны различия между двумя версиями данной страницы.
Предыдущая версия справа и слева Предыдущая версия Следующая версия | Предыдущая версия | ||
freebsd:cacti [2021/11/13 16:53] alex |
freebsd:cacti [2021/11/13 16:54] (текущий) alex |
||
---|---|---|---|
Строка 301: | Строка 301: | ||
to either files owned by the poller account, and in cases where someone runs the Cacti poller as root, can | to either files owned by the poller account, and in cases where someone runs the Cacti poller as root, can | ||
compromise the operating system allowing attackers to exploit your infrastructure. | compromise the operating system allowing attackers to exploit your infrastructure. | ||
- | + | | |
Therefore, several versions ago, Cacti was enhanced to provide Whitelist capabilities on the these types of Data | Therefore, several versions ago, Cacti was enhanced to provide Whitelist capabilities on the these types of Data | ||
- | Input Methods. Though this does secure Cacti more thouroughly, it does increase the amount of work required by the Cacti administrator to import and manage Templates and Packages. | + | Input Methods. Though this does secure Cacti more thouroughly, it does increase the amount of work required by |
+ | the Cacti administrator to import and manage Templates and Packages. | ||
| | ||
The way that the Whitelisting works is that when you first import a Data Input Method, or you re-import a Data | The way that the Whitelisting works is that when you first import a Data Input Method, or you re-import a Data | ||
Строка 309: | Строка 310: | ||
Data Sources will be immediatly disabled until the administrator validates that the Data Input Method is valid. | Data Sources will be immediatly disabled until the administrator validates that the Data Input Method is valid. | ||
| | ||
- | To make identifying Data Input Methods in this state, we have provided a validation script in Cacti's CLI directory that can be run with the following options: | + | To make identifying Data Input Methods in this state, we have provided a validation script in Cacti's CLI |
+ | directory that can be run with the following options: | ||
| | ||
php -q input_whitelist.php --audit - This script option will search for any Data Input Methods that are currently | php -q input_whitelist.php --audit - This script option will search for any Data Input Methods that are currently |