Vendor fix: make the default read and write communities NULL. This
basically disables any access unless other strings are set in the config file. Note, that there is no way to set the communities back to NULL once they're set to something not NULL.
This commit is contained in:
parent
e9d4cb69e2
commit
d4199d75a1
Notes:
svn2git
2020-12-20 02:59:44 +00:00
svn path=/vendor/bsnmp/dist/; revision=154180
@ -1462,8 +1462,8 @@ main(int argc, char *argv[])
|
||||
/*
|
||||
* Get standard communities
|
||||
*/
|
||||
(void)comm_define(1, "SNMP read", NULL, "public");
|
||||
(void)comm_define(2, "SNMP write", NULL, "public");
|
||||
(void)comm_define(1, "SNMP read", NULL, NULL);
|
||||
(void)comm_define(2, "SNMP write", NULL, NULL);
|
||||
community = COMM_INITIALIZE;
|
||||
|
||||
trap_reqid = reqid_allocate(512, NULL);
|
||||
|
@ -42,6 +42,8 @@ traphost := noc.bar.com
|
||||
trapport := 162
|
||||
|
||||
read := "public"
|
||||
# Uncomment the line below that sets the community string
|
||||
# to enable write access.
|
||||
write := "geheim"
|
||||
trap := "mytrap"
|
||||
|
||||
@ -52,8 +54,20 @@ trap := "mytrap"
|
||||
begemotSnmpdDebugDumpPdus = 2
|
||||
begemotSnmpdDebugSyslogPri = 7
|
||||
|
||||
#
|
||||
# Set the read and write communities.
|
||||
#
|
||||
# The default value of the community strings is NULL (note, that this is
|
||||
# different from the empty string). This disables both read and write access.
|
||||
# To enable read access only the read community string must be set. Setting
|
||||
# the write community string enables both read and write access with that
|
||||
# string.
|
||||
#
|
||||
# Be sure to understand the security implications of SNMPv2 - the community
|
||||
# strings are readable on the wire!
|
||||
#
|
||||
begemotSnmpdCommunityString.0.1 = $(read)
|
||||
begemotSnmpdCommunityString.0.2 = $(write)
|
||||
# begemotSnmpdCommunityString.0.2 = $(write)
|
||||
begemotSnmpdCommunityDisable = 1
|
||||
|
||||
# open standard SNMP ports
|
||||
|
Loading…
Reference in New Issue
Block a user