ruby-on-rails - monit: 控制文件 '/etc/monit/monitrc' 必须归你所有

Question

我要在 monitrc 中访问以下详细信息:

set httpd port 2812 and
    use address localhost  # only accept connection from localhost
    allow 0.0.0.0/0.0.0.0
#    allow admin:monit      # require user 'admin' with password 'monit'

   allow @mygroup

Answer 1

在 Monit 的源文件 p.y 中的某处，有代码检查 monitrc 并附有注释:

/*
 * Secure check the monitrc file. The run control file must have the
 * same uid as the REAL uid of this process, it must have permissions
 * no greater than 700 and it must not be a symbolic link.
 */

消息 The control file '/etc/monit/monitrc' must be owned by you 是由此检查生成的。要修复它，您需要更改 monitrc 文件所有者或运行 Monit 守护程序的用户，以便它们相同。

这也来自 Monit documentation :

To protect the security of your control file and passwords the control file must have read-write permissions no more than 0700 (u=xrw,g=,o=); Monit will complain and exit otherwise.