[check_postgres] more secure nagios checks

[Robert Treat]

On Thursday 12 March 2009 14:31:45 Robert Treat wrote:
> On Tuesday 10 March 2009 15:31:17 Robert Treat wrote:
> > Note, I spoke with greg a bit, and it looks like we can provide and a
> > thin layer between check_postgres and the database to give the nagios
> > user access to all the various knobs/switches it needs without full
> > superuser access. I have this working with wal files, the rest should be
> > quite a bit easier. Anyone interested can following along at
> > http://github.com/xzilla/check_postgres/tree/dashdashsecure
>
> minor update... I have this working for the three checks the docs indicate
> need superuser status. I plan to tighten up the views a little so they
> don't leak unneeded information, but at this point we have something that
> works. I'll probably roll this into production somewhere next week. Any
> feedback appreciated.

Just an FYI, I have this running in production now, and it works OK. If anyone 
wants to check out the code, please see the file check_postgres.sql at 
http://github.com/xzilla/check_postgres/tree/dashdashsecure. 

-- 
Robert Treat
Conjecture: http://www.xzilla.net
Consulting: http://www.omniti.com