Branch: refs/heads/master
Home: https://github.com/Checkmk/checkmk
Commit: 2670c0e09eefa5eb68c988e26240f3ed4c6c17db
https://github.com/Checkmk/checkmk/commit/2670c0e09eefa5eb68c988e26240f3ed4…
Author: Lukas Lengler <lukas.lengler(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
M cmk/plugins/collection/agent_based/fortigate_signatures.py
Log Message:
-----------
some post migration cleanups for fortigate_signatures
CMK-16492
Change-Id: I322c87a3bb8f59b7a698ea75e4f0714c73d96edd
Commit: 5244602bed5387c9a8249ed57de1da645c3863d7
https://github.com/Checkmk/checkmk/commit/5244602bed5387c9a8249ed57de1da645…
Author: Moritz Kirschner <moritz.kirschner(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
M cmk/gui/http.py
M cmk/gui/wato/pages/__init__.py
M cmk/gui/wato/pages/parentscan.py
A cmk/gui/watolib/parent_scan.py
M cmk/gui/watolib/registration.py
A tests/unit/cmk/gui/watolib/test_scan_parents_background_job.py
Log Message:
-----------
parent_scan: Pull background job into watolib
Change-Id: I51d3e59c7a2af5f32af186ee5b0edf6cc0783435
Compare: https://github.com/Checkmk/checkmk/compare/f1d22ebbe663...5244602bed53
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications
Branch: refs/heads/master
Home: https://github.com/Checkmk/checkmk
Commit: f1d22ebbe663b6d994aaa6f4796b0e1da4fb392c
https://github.com/Checkmk/checkmk/commit/f1d22ebbe663b6d994aaa6f4796b0e1da…
Author: Moritz Kirschner <moritz.kirschner(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
M cmk/special_agents/agent_aws.py
M tests/unit/cmk/special_agents/agent_aws/test_agent_aws_glacier.py
Log Message:
-----------
aws: Remove unused glacier cloudwatch section
The cloudwatch section of the glacier resource served no
purpose except for forwarding the colleague contents
of the glacier summary.
CMK-16513
Change-Id: Ied3809f52768ab7f8decf2b2f6e0f299e5a2ec6f
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications
Branch: refs/heads/2.3.0
Home: https://github.com/Checkmk/checkmk
Commit: 4e7dd450944f3ac15e257c4142a74f85243e4eee
https://github.com/Checkmk/checkmk/commit/4e7dd450944f3ac15e257c4142a74f852…
Author: Andreas Umbreit <andreas.umbreit(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
M packages/check-http/Cargo.lock
M packages/check-http/Cargo.toml
Log Message:
-----------
check_http: Support site cert store
By activating the "rustls-tls-native-roots" feature of reqwest,
check_httpv2 now listens to the environment variable SSL_CERT_FILE.
In Checkmk site context, this variable already points to the
cert store ~/var/ssl/ca-certificates.crt as configured in global settings.
Also, the built in cert store from the webpki-roots crate is still active.
CMK-16566
Change-Id: I47bae4dc85beeeaef688768d6243478ffa373c4c
Commit: 86353928e1d060c2074c2f1ccd2ddecebada0e40
https://github.com/Checkmk/checkmk/commit/86353928e1d060c2074c2f1ccd2ddeceb…
Author: Andreas Umbreit <andreas.umbreit(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
M packages/check-http/Cargo.toml
Log Message:
-----------
Fix typo
Change-Id: I333450d605b0c0c18f1b9a6e266ac27c726e40d0
Compare: https://github.com/Checkmk/checkmk/compare/2787fd88ab45...86353928e1d0
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications
Branch: refs/heads/master
Home: https://github.com/Checkmk/checkmk
Commit: af83375968ba0890bd7249db7811f75bae49edba
https://github.com/Checkmk/checkmk/commit/af83375968ba0890bd7249db7811f75ba…
Author: Moritz Kirschner <moritz.kirschner(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
M cmk/automations/results.py
M cmk/base/automations/check_mk.py
M cmk/base/parent_scan.py
M cmk/gui/wato/pages/parentscan.py
M tests/unit/cmk/automations/test_results.py
Log Message:
-----------
parent_scan: Clean up typing
Change-Id: I807ed8fcbe19f93e2e3016a6b0c944d935170ab7
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications
Branch: refs/heads/2.2.0
Home: https://github.com/Checkmk/checkmk
Commit: 4a8e26d040330e74bbc5b9f4e9c8b0f9c5317dfa
https://github.com/Checkmk/checkmk/commit/4a8e26d040330e74bbc5b9f4e9c8b0f9c…
Author: Lukas Lengler <lukas.lengler(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
M cmk/gui/utils/ntop.py
Log Message:
-----------
ntopng: add error message for failing active connections
1. failing active connection -> error message in /var/log/web.log
2. successful active connection -> no messages
3. inactive connection -> no messages
Also ConnectionRefusedErrors and OSErrors are now handled and logged.
CMK-15731
Change-Id: I3ffa0fe6a86d6a1228bd9865254397be7322d5a7
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications
Branch: refs/heads/2.3.0
Home: https://github.com/Checkmk/checkmk
Commit: 2787fd88ab457eafe8e8b4a0913b5f38355309b1
https://github.com/Checkmk/checkmk/commit/2787fd88ab457eafe8e8b4a0913b5f383…
Author: Lukas Lengler <lukas.lengler(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
M cmk/gui/utils/ntop.py
Log Message:
-----------
ntopng: add error message for failing active connections
1. failing active connection -> error message in /var/log/web.log
2. successful active connection -> no messages
3. inactive connection -> no messages
Also ConnectionRefusedErrors and OSErrors are now handled and logged.
CMK-15731
Change-Id: I3ffa0fe6a86d6a1228bd9865254397be7322d5a7
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications
Branch: refs/heads/2.3.0
Home: https://github.com/Checkmk/checkmk
Commit: 5dd4158dd8c48796fac22701435718fb076e456b
https://github.com/Checkmk/checkmk/commit/5dd4158dd8c48796fac22701435718fb0…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
M tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
Generalize common agent plugin code root_owned()
Pass permissions, owner and group directly and document arguments
Change-Id: I29095c316e1a4cd8bd234b65cbcfbc3867f2a693
Commit: 844db71b552d19d31bc9e68e441cb7691f55ed46
https://github.com/Checkmk/checkmk/commit/844db71b552d19d31bc9e68e441cb7691…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
A .werks/16198.md
M agents/plugins/mk_informix
Log Message:
-----------
mk_informix: Do not allow privilege escalation
The informix database monitoring plugin would previously `eval` statements parsed from `$INFORMIXDIR/bin/onstat`. Since the plugin is usually run as root, this could cause statements injected in `$INFORMIXDIR/bin/onstat` to be run as root as well.
By adding scripts named the same as other functionality found in `$PATH` to `$INFORMIXDIR/bin`, `$PATH` functionality could also be overshadowed and the custom executed as root.
Finally, `$INFORMIXDIR/bin/onstat` would be executed as root, allowing a substituted script to be run with elevated privileges.
With this werk, the environment variables will be exported instead and `$PATH` will now be searched before `$INFORMIXDIR/bin`.
The plugin will now also check if `$INFORMIXDIR/bin/onstat` belongs to root if the plugin is executed as root. If not, it will be executed as the user owning the executable.
Change-Id: Idfe1d31c80998c6067baa718df9fb0a5c293eb27
JIRA-Ref: CMK-15000
Commit: 0d24b786d29f66e38450ba9cd41b5247fde1a7d0
https://github.com/Checkmk/checkmk/commit/0d24b786d29f66e38450ba9cd41b5247f…
Author: Leonardo Petrora <leonardo.petrora(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
M cmk/gui/openapi/restful_objects/code_examples.py
Log Message:
-----------
Update `curl` examples in the REST API documentation
As curl is not suited for writing large scripts, when using our REST
API. In order to not confuse customers we did the following:
* Moved the curl tab to the last position, such that it is less
prominent
* Removed the if/else complexity. Only a singular `curl` call remains
* Added a warning message that `curl` should not be used for writing
large scripts and the code is provided for debugging purposes only.
CMK-14077
Change-Id: I057189e82eb9b29d7dd4aa77c1a7d441cad5dc43
Compare: https://github.com/Checkmk/checkmk/compare/9be89ebd115b...0d24b786d29f
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications
Branch: refs/heads/master
Home: https://github.com/Checkmk/checkmk
Commit: 20c171b5ac108d3d67a6abae0a121886a5883a49
https://github.com/Checkmk/checkmk/commit/20c171b5ac108d3d67a6abae0a121886a…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
M tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
Generalize common agent plugin code root_owned()
Pass permissions, owner and group directly and document arguments
Change-Id: I29095c316e1a4cd8bd234b65cbcfbc3867f2a693
Commit: 28d42981e7a2c22f9d61a1344ef8781ab780e842
https://github.com/Checkmk/checkmk/commit/28d42981e7a2c22f9d61a1344ef8781ab…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
A .werks/16198.md
M agents/plugins/mk_informix
Log Message:
-----------
mk_informix: Do not allow privilege escalation
The informix database monitoring plugin would previously `eval` statements parsed from `$INFORMIXDIR/bin/onstat`. Since the plugin is usually run as root, this could cause statements injected in `$INFORMIXDIR/bin/onstat` to be run as root as well.
By adding scripts named the same as other functionality found in `$PATH` to `$INFORMIXDIR/bin`, `$PATH` functionality could also be overshadowed and the custom executed as root.
Finally, `$INFORMIXDIR/bin/onstat` would be executed as root, allowing a substituted script to be run with elevated privileges.
With this werk, the environment variables will be exported instead and `$PATH` will now be searched before `$INFORMIXDIR/bin`.
The plugin will now also check if `$INFORMIXDIR/bin/onstat` belongs to root if the plugin is executed as root. If not, it will be executed as the user owning the executable.
Change-Id: Idfe1d31c80998c6067baa718df9fb0a5c293eb27
Commit: a1e0f889a6e63ec1ea6b7f40a17d6114c7563d32
https://github.com/Checkmk/checkmk/commit/a1e0f889a6e63ec1ea6b7f40a17d6114c…
Author: Lukas Lengler <lukas.lengler(a)checkmk.com>
Date: 2024-03-21 (Thu, 21 Mar 2024)
Changed paths:
M cmk/gui/utils/ntop.py
Log Message:
-----------
ntopng: add error message for failing active connections
1. failing active connection -> error message in /var/log/web.log
2. successful active connection -> no messages
3. inactive connection -> no messages
Also ConnectionRefusedErrors and OSErrors are now handled and logged.
CMK-15731
Change-Id: I3ffa0fe6a86d6a1228bd9865254397be7322d5a7
Compare: https://github.com/Checkmk/checkmk/compare/f03118a55715...a1e0f889a6e6
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications