Re: MONIT - Install shell only ?

[Eric Pailleau]

Le 10/08/2011 11:16, Emil Natan a écrit :
> In terms of security ... I have the whole "set httpd port ..." section 
> commented in the configuration file and monit is not listening on any network port.
>
> ena

For sure, it is secure.
The problem with this is that any restart/unmonitor/etc... action must be done 
as root.
So the root access (password or RSA key) must be given to junior administrators 
.
The web app is a nice way to give access to some people for normal/simple 
administration
but not as (real) root (like sudoers).
That limit risks especially when you are on holidays :>) ...
Regards