Cacti Data Input methods that call a script can be exploited in
ways that a non-administrator can perform damage to either files
owned by the poller account, and in cases where someone runs the
Cacti poller as root, can compromise the operating system allowing
attackers to exploit your infrastructure.

Therefore, several versions ago, Cacti was enhanced to provide
Whitelist capabilities on the these types of Data Input Methods.
Though this does secure Cacti more thoroughly, it does increase
the amount of work required by the Cacti administrator to import and
manage Templates and Packages.

The way that the Whitelisting works is that when you first import
a Data Input Method, or you re-import a Data Input Method, and the
script and or arguments change in any way, the Data Input Method,
and all the corresponding Data Sources will be immediatly disabled
until the administrator validates that the Data Input Method is valid.

To make identifying Data Input Methods in this state, we have
provided a validation script in Cacti's CLI directory that can be
 run with the following options:

- This script option will search for any Data Input Methods that
  are currently banned and provide details as to why.
# php -q /usr/share/cacti/cli/input_whitelist.php --audit 

- This script option un-ban the Data Input Methods that are
  currently banned.
# php -q /usr/share/cacti/cli/input_whitelist.php --update

- This script option will re-enable any disabled Data Sources.
# php -q /usr/share/cacti/cli/input_whitelist.php --update --push

It is strongly suggested that you update your config.php to enable
this feature by uncommenting the $input_whitelist variable and then
running the three CLI script options above after the web based
install has completed.

