Branch: refs/heads/1.6.0
Home: https://github.com/tribe29/checkmk
Commit: 492ab9752ff9bb60d70fd70c2d4aee3eace486b4
https://github.com/tribe29/checkmk/commit/492ab9752ff9bb60d70fd70c2d4aee3ea…
Author: Andreas Umbreit <andreas.umbreit(a)tribe29.com>
Date: 2021-03-12 (Fri, 12 Mar 2021)
Changed paths:
A .werks/12153
M cmk/gui/plugins/wato/check_mk_configuration.py
Log Message:
-----------
12153 SEC Prevent Linux agent systemd service from being accidentally accessible via network
When baking agents with activated ruleset "Allowed agent access via IP address", the
configured restriction previously would only apply to the Windows agent service and the Linux
xinetd service.
As the used service dispatcher (xinetd or systemd) is automatically chosen on Linux
systems on agent package installation (with xinetd being preferred), the agent might
accidentally result in being accessible via systemd service without restiction, although
it is expected that an IP restriction is active.
To mitigate this situation, the Linux agent systemd service now also applies the
configured restriction via IP Access Lists.
However, there's one caveat to this approach: The IP Access Lists feature is only
available for systemd installations from version 235. Because of this, the Checkmk agent
package will abort the activation of the systemd service, if a systemd version < 235 is
detected on the host. In that case, the Checkmk agent will be completely inaccessible via
systemd. Please note that this is only relevant if no xinetd is available, because
xinetd will be used as a service dispatcher before considering systemd.
Please note that for Solaris, there is no IP restriction available at all, because the
Checkmk agent package will use inetd as a service dispatcher on Solaris hosts.
While this is not a new situation, as this has never been supported on Solaris, however
the help text of the "Allowed agent access via IP address" now contains a warning about
this fact.
FEED-5501
Change-Id: I2a628e2a9d3751c470971d8f6dcb631bda057aaf
Branch: refs/heads/master
Home: https://github.com/tribe29/checkmk
Commit: edb171eba9800fa2fed97fa828a375db1a6eb72f
https://github.com/tribe29/checkmk/commit/edb171eba9800fa2fed97fa828a375db1…
Author: Sergey Kipnis <sergey.kipnis(a)tribe29.com>
Date: 2021-03-12 (Fri, 12 Mar 2021)
Changed paths:
M agents/wnx/src/engine/modules.cpp
M agents/wnx/src/engine/modules.h
M agents/wnx/watest/test-modules.cpp
M agents/wnx/watest/test-winperf.cpp
M agents/wnx/watest/test-yaml.cpp
M agents/wnx/watest/test_tools.cpp
M agents/wnx/watest/test_tools.h
Log Message:
-----------
CMK-7155 - enable control over quick reinstall
- add tests
- rework old tests
- make testing more stable(to be suitable for the case)
Change-Id: I7e61d8c0a06145a0c95b9c2cf65e2f6bf26c1990
Branch: refs/heads/2.0.0
Home: https://github.com/tribe29/checkmk
Commit: b0919242febd81baf2c6ff8fb11b9c29d9098860
https://github.com/tribe29/checkmk/commit/b0919242febd81baf2c6ff8fb11b9c29d…
Author: Lars Michelsen <lm(a)tribe29.com>
Date: 2021-03-12 (Fri, 12 Mar 2021)
Changed paths:
A .werks/12547
M cmk/gui/wato/pages/audit_log.py
Log Message:
-----------
12547 SEC Fix possible XSS on audit log page
Displaying the detail text of changes could trigger execution of arbitrary
javascript code that was previously stored by a modification made to the
configuration.
Change-Id: I38f50752d80770f795ff727e3b0bde0723848a3f
Branch: refs/heads/master
Home: https://github.com/tribe29/checkmk
Commit: 29d3f74a63dccb88116f14357e8ee724db868d50
https://github.com/tribe29/checkmk/commit/29d3f74a63dccb88116f14357e8ee724d…
Author: Lars Michelsen <lm(a)tribe29.com>
Date: 2021-03-12 (Fri, 12 Mar 2021)
Changed paths:
A .werks/12547
M cmk/gui/wato/pages/audit_log.py
Log Message:
-----------
12547 SEC Fix possible XSS on audit log page
Displaying the detail text of changes could trigger execution of arbitrary
javascript code that was previously stored by a modification made to the
configuration.
Change-Id: I38f50752d80770f795ff727e3b0bde0723848a3f
Branch: refs/heads/master
Home: https://github.com/tribe29/checkmk
Commit: d60f2f412a0ddbdeb2fc7e6b6d32906965a2c66f
https://github.com/tribe29/checkmk/commit/d60f2f412a0ddbdeb2fc7e6b6d3290696…
Author: Notausstieg0309 <34344724+Notausstieg0309(a)users.noreply.github.com>
Date: 2021-03-12 (Fri, 12 Mar 2021)
Changed paths:
M cmk/gui/watolib/tags.py
Log Message:
-----------
wato tags: fix exception when changing a tag-id
Change-Id: I7e44186c7029cf6db76c0f21d6916461d7808f89
Commit: e291edd929d16b5cc860f139e40be1466d52fdcd
https://github.com/tribe29/checkmk/commit/e291edd929d16b5cc860f139e40be1466…
Author: Lars Michelsen <lm(a)tribe29.com>
Date: 2021-03-12 (Fri, 12 Mar 2021)
Changed paths:
A .werks/12546
Log Message:
-----------
12546 FIX Tags: Fix exception when changing existing tag ID
When changing the tag id of an already used tag and choose "Fix affected
folders, hosts and rules" when saving those changes, the following exception
appears: <tt>TypeError (isinstance() arg 2 must be a class, type, or tuple of classes and types)</tt>.
Change-Id: Id83224b25ccf57d16a7392d20afc0c612125abf1
Compare: https://github.com/tribe29/checkmk/compare/c5b2e8f1a1b0...e291edd929d1
Branch: refs/heads/2.0.0
Home: https://github.com/tribe29/checkmk
Commit: f6c88c255106b0bef291d3a1074274be8e03e423
https://github.com/tribe29/checkmk/commit/f6c88c255106b0bef291d3a1074274be8…
Author: Notausstieg0309 <34344724+Notausstieg0309(a)users.noreply.github.com>
Date: 2021-03-12 (Fri, 12 Mar 2021)
Changed paths:
M cmk/gui/watolib/tags.py
Log Message:
-----------
wato tags: fix exception when changing a tag-id
Change-Id: I7e44186c7029cf6db76c0f21d6916461d7808f89
Commit: d45639c2bf9f164942d581644ae3f3873c11905b
https://github.com/tribe29/checkmk/commit/d45639c2bf9f164942d581644ae3f3873…
Author: Lars Michelsen <lm(a)tribe29.com>
Date: 2021-03-12 (Fri, 12 Mar 2021)
Changed paths:
A .werks/12546
Log Message:
-----------
12546 FIX Tags: Fix exception when changing existing tag ID
When changing the tag id of an already used tag and choose "Fix affected
folders, hosts and rules" when saving those changes, the following exception
appears: <tt>TypeError (isinstance() arg 2 must be a class, type, or tuple of classes and types)</tt>.
Change-Id: Id83224b25ccf57d16a7392d20afc0c612125abf1
Compare: https://github.com/tribe29/checkmk/compare/9987b1a04fcd...d45639c2bf9f
Branch: refs/heads/2.0.0
Home: https://github.com/tribe29/checkmk
Commit: 9987b1a04fcd3c586465c1131d615b981e5d9536
https://github.com/tribe29/checkmk/commit/9987b1a04fcd3c586465c1131d615b981…
Author: Lars Michelsen <lm(a)tribe29.com>
Date: 2021-03-12 (Fri, 12 Mar 2021)
Changed paths:
A .werks/12292
M cmk/gui/wato/pages/rulesets.py
Log Message:
-----------
12292 FIX Rules: Fix displaying rule with empty service conditions
Rules with an empty list of service conditions can not be created with
the setup these days because they match no service at all. Previous
versions made this possible.
Displaying these rules was not possible with previous 2.0.0 and lead to
a crash "IndexError (list index out of range)".
Change-Id: Ic56bec7f32097765ba7595790d3e0dcb1f2f28a4