Security? Not my problem!

There are many people, who translate SNMP with “Security? Not my problem”. Honestly, in most cases of an insecure snmpd you will find badly configured snmpd with easly guessable community strings. This is the classic wetware error . On the other side, there are some tricks to make a well configured snmpd server more secure: Most snmpd demons run with root privileges. Matty points in his blog to a simple method to run snmpd without root rights under Solaris when the client has connected. Of course, you can run it without root privs with least privileges but this is a little bit more difficult …