@Ansgar: I like to leave the final decision to you as I'm just co-maintainer for openSUSE here. Always allowing the nagcmd group to write into this file might not be the best idea from my pow. Especially as "check_external_commands" might be disabled in the nagios configuration. I did not check, yet, what happens if "someone" writes into the pipe regardless of the configuration settings...