#4612 - Enable External Commands in Nagios

modules/nagios/manifests/server.pp

 class nagios::server(
+    $directory = hiera('nagios::server::directory', '/var/lib/nagios3'),
     $domain,
     $certificate,
     $private_key,
     $is_default=false,
     $htpasswd_source,
     $admins,
     $zone,
     $contacts = hiera('nagios::server::contacts', {}),
     $contactgroups = hiera('nagios::server::contactgroups', {}),
     $commands = hiera('nagios::server::commands', {}),
@@ skipping 31 matching lines @@
     log => 'access_log_monitoring'
   }
 
   spawn_fcgi::php_pool {'global':
     ensure => present,
     socket => '/tmp/php-fastcgi.sock',
     children => '3',
     require => Package['php5-cgi']
   }
 
+  # See http://hub.eyeo.com/issues/4612#note-2
+  if $::operatingsystem == 'Debian' {

[mathias, 2017/10/25 14:40:55]

The condition should use $::osfamily, each associated OS should operate DPKG.

[f.nicolaisen, 2017/10/25 15:10:29]

Acknowledged.

+
+    $dpkg_statoverride = 'dpkg-statoverride'
+    $dpkg_options = shellquote(['nagios', 'nagios', '751', "$directory"])
+    $dpkg_options_rw = shellquote(['nagios', 'www-data', '2710', "$directory/rw"])
+
+    exec {"$directory":
+      command => "$dpkg_statoverride --update --add $dpkg_options",
+      unless => "$dpkg_statoverride --list $dpkg_options",
+      path => ["/usr/bin/", "/bin/"],
+      user => root,
+      notify => Service['nagios3'],
+      require => Package['nagios3'],
+    }
+
+    exec {"$directory/rw":
+      command => "$dpkg_statoverride --update --add $dpkg_options_rw",
+      unless => "$dpkg_statoverride --list $dpkg_options_rw",
+      path => ["/usr/bin/", "/bin/"],
+      user => root,
+      notify => Service['nagios3'],
+      require => Package['nagios3'],
+    }
+  }
+
   service {'nagios3':
     ensure => running,
     enable => true,
     require => [Package['nagios3'], Package['pnp4nagios']]
   }
 
   service {'apache2':
     ensure => stopped,
     enable => false,
     require => Package['nagios3'],
@@ skipping 98 matching lines @@
     notify => Service['nagios3']
   }
 
   create_resources(nagios_contact, $contacts)
   create_resources(nagios_contactgroup, $contactgroups)
   create_resources(nagios_command, $commands)
   create_resources(nagios_service, $services)
   create_resources(nagios_host, $hosts)
   create_resources(nagios_hostgroup, $hostgroups)
 }