Received: from mx009.vodafonemail.xion.oxcs.net (mx009.vodafonemail.xion.oxcs.net [153.92.174.39])
	by nld3-dev1.alpinelinux.org (Postfix) with ESMTPS id 055F2782BFB
	for <~alpine/users@lists.alpinelinux.org>; Mon,  8 Jun 2020 21:17:01 +0000 (UTC)
Received: from vsmx002.vodafonemail.xion.oxcs.net (unknown [192.168.75.192])
	by mta-6-out.mta.xion.oxcs.net (Postfix) with ESMTP id 59B5F60438B
	for <~alpine/users@lists.alpinelinux.org>; Mon,  8 Jun 2020 21:17:01 +0000 (UTC)
Received: from app-41.app.xion.oxcs.net (app-41.app.xion.oxcs.net [10.10.1.41])
	by mta-6-out.mta.xion.oxcs.net (Postfix) with ESMTPA id 45E8B60449A
	for <~alpine/users@lists.alpinelinux.org>; Mon,  8 Jun 2020 21:16:59 +0000 (UTC)
Date: Mon, 8 Jun 2020 23:16:58 +0200 (CEST)
From: Al Pi <alpine@vodafonemail.de>
To: ~alpine/users@lists.alpinelinux.org
Message-ID: <1409325335.253428.1591651019085@mail.vodafone.de>
In-Reply-To: <CALci+FSCuWiQzeZhHcrbWK3zHrPbGExW7Seb1FjB0tt5EkjriQ@mail.gmail.com>
References: <D6065123-2D8C-4C5D-8D56-7E5B662A9247@rvr.in>
 <CALci+FSCuWiQzeZhHcrbWK3zHrPbGExW7Seb1FjB0tt5EkjriQ@mail.gmail.com>
Subject: Re: Smokeping Lighttpd config issue
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: quoted-printable
X-Priority: 3
Importance: Medium
X-Mailer: Open-Xchange Mailer v7.8.4-Rev68
X-Originating-Client: open-xchange-appsuite
X-VADE-STATUS: LEGIT

> PICCORO McKAY Lenz <mckaygerhard@gmail.com> hat am 8. Juni 2020 um 04:47 =
geschrieben:=20
>
> =C2=A0
> CORRECT WAY:
> =C2=A0
> 1) DONT USE ANY SUDO SHIT
> 2) use aliasing in lighttpd.. check lighttpd wiki page for examples
> 3) use aliasing to the .simg=C2=A0file event setup soft links
> 4) added lighttpd user to the net group to able to use traceroute, or use=
 setuid
> 5)=C2=A0added lighttpd user to the net group to able to use fping, or use=
 setuid
>=20

Why do you think a sudo rule, that allows a user only a specific command (p=
ossibly
only with specific options), would be worse than adding a network facing
daemon to the net group?