I've been trying to look into hardening Nagios (if there is such a thing...), but haven't found anything too definitive on what to do or guidance on what to even look at.
I'm wary to keep Nagios running until I know more about its potential security vulnerabilities and how to best remove those vulnerabilities, or at least harden it so that it's less of a potential problem.
I currently have Nagios disabled, as far as I can tell, until I can find ways to harden it a bit. No Nagios processes are running, and I have run
chkconfig nagios off.
My Configuration is as follows:
- CentOS 6.3 x64
- Nagios Core 3.4.1
Here are the questions that I have:
Is there anything else I need to check to make sure that Nagios is disabled?
What are the possible security vulnerabilities with running Nagios in the default configuration?
What are some steps that I can take to harden Nagios?