Package: mon Version: 1.2.0-9 Severity: normal For SE Linux, AppArmor, and other security systems to easily give different levels of access to different programs they should be in different directories.
There are 2 main categories of monitor scripts, local checks (EG running ps, df, reading /proc, etc) and remote checks (ping, snmp, remote service checks, etc). These 2 categories of monitor scripts should have different levels of access, scripts which check remote services should not have much access to the local system and scripts that have privileged access to the local system (EG filesystem status checks that run as root) should not be talking to the Internet. Having these scripts in separate directories means that it's easy to assign different security contexts to them. It is possible to assign contexts on a program name basis, but the problem is that there is an ever increasing list of monitor scripts. So having a new directory is the best long term solution.
