Security and Hardening

Proteja CGI, arquivos de recurso, comandos, plugins e interfaces remotas com privilégio mínimo.

This module follows an evidence-first workflow: isolate collection, processing, storage, state evaluation, and presentation before changing production settings.

1. Define the operational objective and expected result.
2. Record version, topology, dependencies, and required flows.
3. Test the underlying protocol or plugin outside the monitoring scheduler.
4. Validate configuration before reload/restart when the platform supports it.
5. Apply the smallest change and watch logs plus one full collection cycle.
6. Keep a tested rollback path.

# Valide primeiro em laboratório
# Registre estado inicial, mudança, resultado e rollback
# Nunca aplique alteração em produção sem uma verificação pós-mudança

• Main process is healthy and logs show no recurring error.
• Manual collection returns the expected value.
• Scheduled collection finishes within its time budget.
• Frontend timestamps and states match the source.
• A controlled failure and recovery produce the expected lifecycle.

Monitoring systems expose topology, inventory, versions, credentials, and operational state. Apply segmentation, least privilege, secure protocols, protected secrets, and explicit administrative access controls.

• Nagios Core releases
• Nagios Core documentation
• Nagios Plugins
• CERT.br security practices