Impersonate as Icinga user, not root

This requires write permissions for

- etc/features-*
- etc/*.conf
- var/{lib,cache}/icinga2/*

Typically permissions are handled by prepare-dirs,
or the respective CLI commands are run as root either way.

fixes #4947

diff --git a/lib/cli/apisetupcommand.cpp b/lib/cli/apisetupcommand.cpp
index d68aeedd5d604de9ae84a1feb4a7a61abdf00aff..fcfb9c8cdf5cc04e75db33e765d037860fe08586 100644 (file)
--- a/lib/cli/apisetupcommand.cpp
+++ b/lib/cli/apisetupcommand.cpp
@@ -24,7 +24,7 @@ String ApiSetupCommand::GetShortDescription() const
 
 ImpersonationLevel ApiSetupCommand::GetImpersonationLevel() const
 {
-       return ImpersonateRoot;
+       return ImpersonateIcinga;
 }
 
 int ApiSetupCommand::GetMaxArguments() const

diff --git a/lib/cli/featuredisablecommand.cpp b/lib/cli/featuredisablecommand.cpp
index df8e35062cece867b6f9583b6c47c8eb606fccaa..95a4a26d77d7aa557d9363d0b16fba0c8ca49394 100644 (file)
--- a/lib/cli/featuredisablecommand.cpp
+++ b/lib/cli/featuredisablecommand.cpp
@@ -36,7 +36,7 @@ int FeatureDisableCommand::GetMaxArguments() const
 
 ImpersonationLevel FeatureDisableCommand::GetImpersonationLevel() const
 {
-       return ImpersonateRoot;
+       return ImpersonateIcinga;
 }
 
 /**

diff --git a/lib/cli/featureenablecommand.cpp b/lib/cli/featureenablecommand.cpp
index 7426e56cae5a07c50ef2ac7e3ced6c51df622062..0cf906648e41764189bb0d9f883f541ed28677bc 100644 (file)
--- a/lib/cli/featureenablecommand.cpp
+++ b/lib/cli/featureenablecommand.cpp
@@ -36,7 +36,7 @@ int FeatureEnableCommand::GetMaxArguments() const
 
 ImpersonationLevel FeatureEnableCommand::GetImpersonationLevel() const
 {
-       return ImpersonateRoot;
+       return ImpersonateIcinga;
 }
 
 /**

diff --git a/lib/cli/nodesetupcommand.cpp b/lib/cli/nodesetupcommand.cpp
index e250b19b8d7552537cfa3a95383a7b8430c5a573..cd588a95ccd0b83423d55cd9224a067e82a7b35e 100644 (file)
--- a/lib/cli/nodesetupcommand.cpp
+++ b/lib/cli/nodesetupcommand.cpp
@@ -71,7 +71,7 @@ std::vector<String> NodeSetupCommand::GetArgumentSuggestions(const String& argum
 
 ImpersonationLevel NodeSetupCommand::GetImpersonationLevel() const
 {
-       return ImpersonateRoot;
+       return ImpersonateIcinga;
 }
 
 /**

diff --git a/lib/cli/nodewizardcommand.cpp b/lib/cli/nodewizardcommand.cpp
index bb48bfc751f97d8c1b0f43057d0705c32bf22f7c..3a6719ae665a5a0afdb011af7d47b698e9bdbf8d 100644 (file)
--- a/lib/cli/nodewizardcommand.cpp
+++ b/lib/cli/nodewizardcommand.cpp
@@ -37,7 +37,7 @@ String NodeWizardCommand::GetShortDescription() const
 
 ImpersonationLevel NodeWizardCommand::GetImpersonationLevel() const
 {
-       return ImpersonateRoot;
+       return ImpersonateIcinga;
 }
 
 int NodeWizardCommand::GetMaxArguments() const