Nagios checks for pureftpd symlink root folders

[sapes]

Created nagios check that will trigger an alert in case that there are FTP
accounts with the root folder aiming to symlink.
Resolves [PROD-2278]

[NVitanovic]

Please check the comments.

[NVitanovic]

This will not work on RHEL based systems. You don't need the --defaults-file=/etc/mysql/debian.cnf specified. By default on our systems you can login without password if the script is running as root. This is not that secure but is the way that we are using it at the moment.

[NVitanovic]

In case you had CRITICAL state in the log file /var/log/symlink.log and it recovered to OK, you will still have CRITICAL in the log.

I suggest having two files:

1. The lock file that will have CRITICAL or OK at one moment i.e. /var/log/symlink.lock
2. The next log that will check if CRITICAL accounts are found can be /var/log/symlink.log

On line 18, you could log CRITICAL only to the lock file with > so the lock will get overridden.

Issue with this would be if, an attacker was fast enough and Nagios does not alert for 1 CRITICAL. It can be configured differently in Nagios.

[NVitanovic]

Check here maybe in the lock file instead of the log.