PhaedrusTheGreek/nagioscheckbeat

Seccomp

lsalsich opened this issue · 1 comments

I want to upgrade to nagioscheckbeat 7.x but I'm concerned about the apparent need to disable seccomp.

Why is forking required in 7.x but not in 6.x? Curious about what changed.

Thanks!

This is due to the security changes that were introduced into libbeat 6.4. Nagioscheckbeat needs to be able to execute the check commands, which is a potential security hazard, but it's been that way all along.