Check_MK Werk 0928: runas: new plugin script to include and execute mrpe, local and plugin scripts as different user

ID: 0928 Title: runas: new plugin script to include and execute mrpe, local and plugin scripts as different user Component: Checks & Agents Level: 2 Class: New Feature Version: 1.2.5i3 With the new plugin <tt>runas</tt> you can configure additional include files and directories for mrpe, local and plugin scripts. You can also change the user context of each of these scripts. It allows non-root users to add additional scripts which might get executed with reduced permission. This check is configured with the configuration file <tt>runas.cfg</tt>. In a default installation this file is located within the Check_MK config directory under <tt>/etc/check_mk/runas.cfg</tt>. The <tt>runas.cfg</tt> configuration syntax is as follow [Script type] [User context] [File / Directory ] The <tt>Script type</tt> can be set to <tt>mrpe</tt>, <tt>local</tt> and <tt>plugin</tt>. The <tt>User context</tt> represents the user. If you do not want to change the context set this field to <tt>-</tt> Depending on the script type the third value points to a file or directory. The mrpe type requires a target file which contains the mrpe commands. Local and plugins types require are target folder, which contains the executable local and plugin scripts.<br> Here is an example configuration: F+:/etc/check_mk/runas.cfg mrpe ab /home/ab/mrpe_commands.cfg mrpe lm /home/lm/mrpe_commands.cfg mrpe - /root/mrpe/extra_commands.cfg plugin ab /var/ab/plugins local ab /var/ab/local F-: <b>Note:</b>You need to set up the local and plugin scripts in different folders, because the line <tt>plugin ab /var/ab/plugins</tt> indicates that all executable files within this folder are treated as plugins.