ICMP pings work from spine (Its running with setuid root)
Code: Select all
[root@RSPowerMGMT lib]# ls -la /usr/local/spine/bin/spine
-rwsr-xr-x. 1 root root 253473 Jul 1 14:29 /usr/local/spine/bin/spine
Code: Select all
[root@RSPowerMGMT lib]# ls -la /bin/ping
-rwsr-xr-x. 1 root root 41368 Mar 5 03:58 /bin/ping
I'm more than willing to setuid anything I need to - this box is purpose-built for only cacti, so the security isn't too much of a concern. I do however require ICMP to work properly as a few hosts only allow that option.