Feature #10915
closedsecurity/pfSense-pkg-sudo sudo.inc enhancement for better support of NRPE
100%
Description
We have a requirement to permit NRPE to run custom commands as root so that we can, for instance, monitor VPN connected clients and Snort alerts on given interfaces.
In order to do this, we need to add some definitions to the sudoers file for the nagios user, the NRPE process running under the nagios user.
We have made and tested an amendment to the security/pfSense-pkg-sudo package which adds the 'User: nagios' to the drop down list of available users when the `net-mgmt/pfSense-pkg-nrpe` package is installed.
This means we can add sudo definitions for the required checks and check the 'sudo' check box in the NRPE definition and have the check run successfully without any manual editing of /usr/local/etc/sudoers.
We've raised this request ready for creation of the PR.