Branch: refs/heads/2.2.0
Home: https://github.com/Checkmk/checkmk
Commit: 23635994690a850a74c8fae9516495ebc521adc0
https://github.com/Checkmk/checkmk/commit/23635994690a850a74c8fae9516495ebc…
Author: Checkmk release system <feedback(a)checkmk.com>
Date: 2024-05-29 (Wed, 29 May 2024)
Changed paths:
M agents/check_mk_agent.aix
M agents/check_mk_agent.freebsd
M agents/check_mk_agent.hpux
M agents/check_mk_agent.linux
M agents/check_mk_agent.macosx
M agents/check_mk_agent.netbsd
M agents/check_mk_agent.openbsd
M agents/check_mk_agent.openvms
M agents/check_mk_agent.openwrt
M agents/check_mk_agent.solaris
M agents/plugins/apache_status.py
M agents/plugins/asmcmd.sh
M agents/plugins/db2_mem
M agents/plugins/dnsclient
M agents/plugins/hpux_lunstats
M agents/plugins/hpux_statgrab
M agents/plugins/ibm_mq
M agents/plugins/isc_dhcpd.py
M agents/plugins/jar_signature
M agents/plugins/kaspersky_av
M agents/plugins/lnx_container_host_if.linux
M agents/plugins/lnx_quota
M agents/plugins/lvm
M agents/plugins/mailman2_lists
M agents/plugins/mailman3_lists
M agents/plugins/mk_apt
M agents/plugins/mk_ceph
M agents/plugins/mk_cups_queues
M agents/plugins/mk_db2.aix
M agents/plugins/mk_db2.linux
M agents/plugins/mk_docker.py
M agents/plugins/mk_errpt.aix
M agents/plugins/mk_filehandler
M agents/plugins/mk_filestats.py
M agents/plugins/mk_haproxy.freebsd
M agents/plugins/mk_informix
M agents/plugins/mk_inotify.py
M agents/plugins/mk_inventory.aix
M agents/plugins/mk_inventory.linux
M agents/plugins/mk_inventory.solaris
M agents/plugins/mk_iptables
M agents/plugins/mk_jolokia.py
M agents/plugins/mk_logins
M agents/plugins/mk_logwatch.py
M agents/plugins/mk_mongodb.py
M agents/plugins/mk_mysql
M agents/plugins/mk_nfsiostat
M agents/plugins/mk_omreport
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/plugins/mk_postgres.py
M agents/plugins/mk_redis
M agents/plugins/mk_sap.aix
M agents/plugins/mk_sap.py
M agents/plugins/mk_sap_hana
M agents/plugins/mk_saprouter
M agents/plugins/mk_scaleio
M agents/plugins/mk_site_object_counts
M agents/plugins/mk_sshd_config
M agents/plugins/mk_suseconnect
M agents/plugins/mk_tinkerforge.py
M agents/plugins/mk_tsm
M agents/plugins/mk_zypper
M agents/plugins/mtr.py
M agents/plugins/netstat.aix
M agents/plugins/netstat.linux
M agents/plugins/netstat.solaris
M agents/plugins/nfsexports
M agents/plugins/nfsexports.solaris
M agents/plugins/nginx_status.py
M agents/plugins/plesk_backups.py
M agents/plugins/plesk_domains.py
M agents/plugins/runas
M agents/plugins/smart
M agents/plugins/symantec_av
M agents/plugins/unitrends_backup
M agents/plugins/unitrends_replication.py
M agents/plugins/vxvm
M agents/plugins/zorp
M agents/windows/plugins/ad_replication.bat
M agents/windows/plugins/arcserve_backup.ps1
M agents/windows/plugins/citrix_farm.ps1
M agents/windows/plugins/citrix_licenses.vbs
M agents/windows/plugins/citrix_xenapp.ps1
M agents/windows/plugins/hyperv_vms.ps1
M agents/windows/plugins/hyperv_vms_guestinfos.ps1
M agents/windows/plugins/iis_app_pool_state.ps1
M agents/windows/plugins/kaspersky_av_client.vbs
M agents/windows/plugins/mcafee_av_client.bat
M agents/windows/plugins/megaraid.bat
M agents/windows/plugins/mk_dhcp_enabled.bat
M agents/windows/plugins/mk_inventory.vbs
M agents/windows/plugins/mk_msoffice.ps1
M agents/windows/plugins/mk_mysql.vbs
M agents/windows/plugins/mk_oracle.ps1
M agents/windows/plugins/msexch_dag.ps1
M agents/windows/plugins/msexch_database.ps1
M agents/windows/plugins/mssql.vbs
M agents/windows/plugins/netstat_an.bat
M agents/windows/plugins/nvidia_smi.ps1
M agents/windows/plugins/rds_licenses.vbs
M agents/windows/plugins/rstcli.bat
M agents/windows/plugins/sansymphony.ps1
M agents/windows/plugins/storcli.bat
M agents/windows/plugins/tsm_checks.bat
M agents/windows/plugins/veeam_backup_status.ps1
M agents/windows/plugins/win_dhcp_pools.bat
M agents/windows/plugins/win_dmidecode.bat
M agents/windows/plugins/win_license.bat
M agents/windows/plugins/win_printers.ps1
M agents/windows/plugins/windows_broadcom_bonding.bat
M agents/windows/plugins/windows_if.ps1
M agents/windows/plugins/windows_intel_bonding.bat
M agents/windows/plugins/windows_multipath.vbs
M agents/windows/plugins/windows_os_bonding.ps1
M agents/windows/plugins/windows_tasks.ps1
M agents/windows/plugins/windows_updates.vbs
M agents/windows/plugins/wmic_if.bat
M agents/wnx/src/common/wnx_version.h
M bin/livedump
M bin/mkbackup
M cmk/special_agents/agent_jolokia.py
M cmk/special_agents/agent_netapp.py
M cmk/special_agents/agent_splunk.py
M cmk/special_agents/agent_vsphere.py
M cmk/utils/version.py
M configure.ac
M defines.make
M docker_image/Dockerfile
M packages/cmk-agent-ctl/src/constants.rs
Log Message:
-----------
Set version to 2.2.0p28
Commit: 0057c4dd618c4371cf7de4e210a73f2b516437fc
https://github.com/Checkmk/checkmk/commit/0057c4dd618c4371cf7de4e210a73f2b5…
Author: Moritz Kirschner <moritz.kirschner(a)checkmk.com>
Date: 2024-05-29 (Wed, 29 May 2024)
Changed paths:
M .site
Log Message:
-----------
Change .site of 2.2.0 from stable to old
Change-Id: I7c66417b9d1e5869bf4659ef29c7cbfc364f04fd
Compare: https://github.com/Checkmk/checkmk/compare/84dd7511986e...0057c4dd618c
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications
Branch: refs/heads/2.1.0
Home: https://github.com/Checkmk/checkmk
Commit: 948cc85f93c912968cba08201b09ecf7211d7a24
https://github.com/Checkmk/checkmk/commit/948cc85f93c912968cba08201b09ecf72…
Author: Checkmk release system <feedback(a)checkmk.com>
Date: 2024-05-06 (Mon, 06 May 2024)
Changed paths:
M agents/check_mk_agent.aix
M agents/check_mk_agent.freebsd
M agents/check_mk_agent.hpux
M agents/check_mk_agent.linux
M agents/check_mk_agent.macosx
M agents/check_mk_agent.netbsd
M agents/check_mk_agent.openbsd
M agents/check_mk_agent.openvms
M agents/check_mk_agent.openwrt
M agents/check_mk_agent.solaris
M agents/cmk-agent-ctl/src/constants.rs
M agents/plugins/apache_status.py
M agents/plugins/asmcmd.sh
M agents/plugins/db2_mem
M agents/plugins/dnsclient
M agents/plugins/hpux_lunstats
M agents/plugins/hpux_statgrab
M agents/plugins/ibm_mq
M agents/plugins/isc_dhcpd.py
M agents/plugins/jar_signature
M agents/plugins/kaspersky_av
M agents/plugins/lnx_container_host_if.linux
M agents/plugins/lnx_quota
M agents/plugins/lvm
M agents/plugins/mailman_lists
M agents/plugins/mk_apt
M agents/plugins/mk_ceph
M agents/plugins/mk_cups_queues
M agents/plugins/mk_db2.aix
M agents/plugins/mk_db2.linux
M agents/plugins/mk_docker.py
M agents/plugins/mk_errpt.aix
M agents/plugins/mk_filehandler
M agents/plugins/mk_filestats.py
M agents/plugins/mk_haproxy.freebsd
M agents/plugins/mk_informix
M agents/plugins/mk_inotify.py
M agents/plugins/mk_inventory.aix
M agents/plugins/mk_inventory.linux
M agents/plugins/mk_inventory.solaris
M agents/plugins/mk_iptables
M agents/plugins/mk_jolokia.py
M agents/plugins/mk_logins
M agents/plugins/mk_logwatch.py
M agents/plugins/mk_mongodb.py
M agents/plugins/mk_mysql
M agents/plugins/mk_nfsiostat
M agents/plugins/mk_omreport
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/plugins/mk_postgres.py
M agents/plugins/mk_redis
M agents/plugins/mk_sap.aix
M agents/plugins/mk_sap.py
M agents/plugins/mk_sap_hana
M agents/plugins/mk_saprouter
M agents/plugins/mk_scaleio
M agents/plugins/mk_site_object_counts
M agents/plugins/mk_sshd_config
M agents/plugins/mk_suseconnect
M agents/plugins/mk_tinkerforge.py
M agents/plugins/mk_tsm
M agents/plugins/mk_zypper
M agents/plugins/mtr.py
M agents/plugins/netstat.aix
M agents/plugins/netstat.linux
M agents/plugins/netstat.solaris
M agents/plugins/nfsexports
M agents/plugins/nfsexports.solaris
M agents/plugins/nginx_status.py
M agents/plugins/plesk_backups.py
M agents/plugins/plesk_domains.py
M agents/plugins/runas
M agents/plugins/smart
M agents/plugins/symantec_av
M agents/plugins/unitrends_backup
M agents/plugins/unitrends_replication.py
M agents/plugins/vxvm
M agents/plugins/websphere_mq
M agents/plugins/zorp
M agents/windows/plugins/ad_replication.bat
M agents/windows/plugins/arcserve_backup.ps1
M agents/windows/plugins/citrix_farm.ps1
M agents/windows/plugins/citrix_licenses.vbs
M agents/windows/plugins/citrix_xenapp.ps1
M agents/windows/plugins/hyperv_vms.ps1
M agents/windows/plugins/hyperv_vms_guestinfos.ps1
M agents/windows/plugins/iis_app_pool_state.ps1
M agents/windows/plugins/kaspersky_av_client.vbs
M agents/windows/plugins/mcafee_av_client.bat
M agents/windows/plugins/megaraid.bat
M agents/windows/plugins/mk_dhcp_enabled.bat
M agents/windows/plugins/mk_inventory.vbs
M agents/windows/plugins/mk_msoffice.ps1
M agents/windows/plugins/mk_mysql.vbs
M agents/windows/plugins/mk_oracle.ps1
M agents/windows/plugins/msexch_dag.ps1
M agents/windows/plugins/msexch_database.ps1
M agents/windows/plugins/mssql.vbs
M agents/windows/plugins/netstat_an.bat
M agents/windows/plugins/rds_licenses.vbs
M agents/windows/plugins/rstcli.bat
M agents/windows/plugins/sansymphony.ps1
M agents/windows/plugins/storcli.bat
M agents/windows/plugins/tsm_checks.bat
M agents/windows/plugins/veeam_backup_status.ps1
M agents/windows/plugins/win_dhcp_pools.bat
M agents/windows/plugins/win_dmidecode.bat
M agents/windows/plugins/win_license.bat
M agents/windows/plugins/win_printers.ps1
M agents/windows/plugins/windows_broadcom_bonding.bat
M agents/windows/plugins/windows_if.ps1
M agents/windows/plugins/windows_intel_bonding.bat
M agents/windows/plugins/windows_multipath.vbs
M agents/windows/plugins/windows_os_bonding.ps1
M agents/windows/plugins/windows_tasks.ps1
M agents/windows/plugins/windows_updates.vbs
M agents/windows/plugins/wmic_if.bat
M agents/wnx/src/common/wnx_version.h
M bin/livedump
M bin/mkbackup
M bin/mkbench
M cmk/utils/version.py
M configure.ac
M defines.make
M docker/Dockerfile
Log Message:
-----------
Set version to 2.1.0p44
Commit: 5c3ec94cbee2900066b3be85e5bb25b9a1c28c5f
https://github.com/Checkmk/checkmk/commit/5c3ec94cbee2900066b3be85e5bb25b9a…
Author: Niko Wenselowski <niko.wenselowski(a)checkmk.com>
Date: 2024-05-07 (Tue, 07 May 2024)
Changed paths:
M buildscripts/infrastructure/build-nodes/almalinux-9/Dockerfile
M buildscripts/infrastructure/build-nodes/centos-7/Dockerfile
M buildscripts/infrastructure/build-nodes/centos-8/Dockerfile
M buildscripts/infrastructure/build-nodes/debian-10/Dockerfile
M buildscripts/infrastructure/build-nodes/debian-11/Dockerfile
M buildscripts/infrastructure/build-nodes/debian-12/Dockerfile
M buildscripts/infrastructure/build-nodes/debian-9/Dockerfile
M buildscripts/infrastructure/build-nodes/sles-12sp3/Dockerfile
M buildscripts/infrastructure/build-nodes/sles-12sp4/Dockerfile
M buildscripts/infrastructure/build-nodes/sles-12sp5/Dockerfile
M buildscripts/infrastructure/build-nodes/sles-15/Dockerfile
M buildscripts/infrastructure/build-nodes/sles-15sp1/Dockerfile
M buildscripts/infrastructure/build-nodes/sles-15sp2/Dockerfile
M buildscripts/infrastructure/build-nodes/sles-15sp3/Dockerfile
M buildscripts/infrastructure/build-nodes/sles-15sp4/Dockerfile
M buildscripts/infrastructure/build-nodes/ubuntu-16.04/Dockerfile
M buildscripts/infrastructure/build-nodes/ubuntu-18.04/Dockerfile
M buildscripts/infrastructure/build-nodes/ubuntu-19.04/Dockerfile
M buildscripts/infrastructure/build-nodes/ubuntu-20.04/Dockerfile
M buildscripts/infrastructure/build-nodes/ubuntu-21.10/Dockerfile
M buildscripts/infrastructure/build-nodes/ubuntu-22.04/Dockerfile
M buildscripts/infrastructure/build-nodes/ubuntu-22.10/Dockerfile
M buildscripts/infrastructure/build-nodes/ubuntu-23.04/Dockerfile
M buildscripts/infrastructure/build-nodes/ubuntu-23.10/Dockerfile
M tests/testlib/containers.py
Log Message:
-----------
Use com.checkmk as container label prefix
Containers used a mix of org.tribe29 and com.tribe29 in the past.
This changes unifies the usage and uses the current company name.
References CMK-13251
Change-Id: Ie44f78a43d79be3dcfb33764e13df6d92b8bd3aa
Commit: ebf4c57fe161e542a3747d38a3cef12d57ea3f01
https://github.com/Checkmk/checkmk/commit/ebf4c57fe161e542a3747d38a3cef12d5…
Author: Niko Wenselowski <niko.wenselowski(a)checkmk.com>
Date: 2024-05-07 (Tue, 07 May 2024)
Changed paths:
M buildscripts/scripts/lib/windows.groovy
Log Message:
-----------
Rename used code-sign certificate
References CMK-13251
Change-Id: I49cce47933de784d05a8898e01add866b8d7018f
Commit: 3c30b467194f07a7f56021c4bbc60d40c4f9e8d5
https://github.com/Checkmk/checkmk/commit/3c30b467194f07a7f56021c4bbc60d40c…
Author: Leonardo Petrora <leonardo.petrora(a)checkmk.com>
Date: 2024-05-13 (Mon, 13 May 2024)
Changed paths:
M cmk/gui/plugins/openapi/endpoints/rule/__init__.py
M tests/unit/cmk/gui/plugins/openapi/test_openapi_rules.py
Log Message:
-----------
Fix validation of value_raw when creating or modifying a rule
CMK-15322
Change-Id: Ide91a687addc8f728c84c6ae419f0bbbfabc11bb
JIRA-Ref: CMK-17049
Commit: 3773593df6d5b4eb98c219c6f3aa08e65c4beceb
https://github.com/Checkmk/checkmk/commit/3773593df6d5b4eb98c219c6f3aa08e65…
Author: Hardy Düttmann <hardy.duettmann(a)iteratio.com>
Date: 2024-05-28 (Tue, 28 May 2024)
Changed paths:
A .werks/16673
M omd/packages/nagvis/skel/etc/nagvis/apache.conf
Log Message:
-----------
Fixed local Nagvis Gadgets configuration in apache.conf
Change-Id: I7ef0bc42a37e17a5f050cd6a12b47960702527a9
closes: #679
Commit: a6188d12f998d63a9c189d633fbb0b9399f4c080
https://github.com/Checkmk/checkmk/commit/a6188d12f998d63a9c189d633fbb0b939…
Author: Hannes Rantzsch <hannes.rantzsch(a)checkmk.com>
Date: 2024-05-28 (Tue, 28 May 2024)
Changed paths:
A .werks/15200
M active_checks/check_sftp
M cmk/gui/plugins/wato/active_checks.py
Log Message:
-----------
15200 SEC Restrict check_sftp local paths
check_sftp now only allows uploading files from and downloading files to
a dedicated directory in SITE_HOME/var. While the names and general
meaning of the command line arguments remain unchanged, paths are now
always interpreted relative to that dedicated directory.
Attempting to escape from this directory (path traversal) will cause the
check to abort and fail.
Change-Id: Iaa369dfbfdad9140fb8367514fd68a578b40c5e8
Commit: 050d63dc4e747cb64ebec870ee1d08b0458cf406
https://github.com/Checkmk/checkmk/commit/050d63dc4e747cb64ebec870ee1d08b04…
Author: Andreas Boesl <andreas.boesl(a)checkmk.com>
Date: 2024-05-28 (Tue, 28 May 2024)
Changed paths:
A .werks/14217
M cmk/base/config.py
Log Message:
-----------
14217 FIX No longer sporadically report stale services which are based on piggyback data
If the check interval of a host was greater than 1 minute, any of its reported piggyback data
was at risk of being ignored by the target host because of being too old.
Change-Id: I2462500e33e08ba04af8ea8f9969141c25c0da03
Commit: ce5f3990968b4d104ec3a2ca413258f21c049a19
https://github.com/Checkmk/checkmk/commit/ce5f3990968b4d104ec3a2ca413258f21…
Author: Sven Panne <sven.panne(a)checkmk.com>
Date: 2024-05-29 (Wed, 29 May 2024)
Changed paths:
M .site
Log Message:
-----------
The 2.1.0 branch is 'ancient' now.
Change-Id: I87542cd9324d7d5ee5ddcd21fbf72e4dcb54e7c2
Commit: 39d4673b65417e55da8dcb5a55c1ecb6f1faa510
https://github.com/Checkmk/checkmk/commit/39d4673b65417e55da8dcb5a55c1ecb6f…
Author: Sofia Colakovic <sofia.colakovic(a)checkmk.com>
Date: 2024-05-29 (Wed, 29 May 2024)
Changed paths:
A .werks/16856
M cmk/gui/plugins/wato/active_checks.py
Log Message:
-----------
16856 FIX disk_smb: Allow macros in 'NetBIOS name of the server' field
With the rework of disk_smb active check in version 2.1.0, using macros in
'NetBIOS name of the server' was disallowed. Now, the macros are enabled
for this field again.
SUP-18728
Change-Id: Iaff2aca9501d5d8fe6a2da9bcbe93e276a27463a
Compare: https://github.com/Checkmk/checkmk/compare/ed7a89f8be9a...39d4673b6541
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications
Branch: refs/heads/release/2.2.0p25
Home: https://github.com/Checkmk/checkmk
Commit: 0683570eb971fe9396633ce884e9b5458ef8ddfa
https://github.com/Checkmk/checkmk/commit/0683570eb971fe9396633ce884e9b5458…
Author: Sofia Colakovic <sofia.colakovic(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16172
M agents/plugins/kaspersky_av
A tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
16172 SEC kaspersky_av: Don't run kav4fs-control or kesl-control if they aren't owned by root
Kaspersky Anti-Virus plugin uses /opt/kaspersky/kav4fs/bin/kav4fs-control and
/opt/kaspersky/kesl/bin/kesl-control commands to monitor a Kaspersky Anti-Virus
installation.
To prevent privilege escalation, the plugin (which is run by root user) must
not run executables which can be changed by less privileged users.
In the default installation, kav4fs-control and kesl-control commands are owned
by root and root is the only user with write permissions, which prevents privilege
escalation attacks.
With this Werk, the plugin checks if control commands are owned by root and root
is the only user with write permissions before running the command. If that's not
the case the commands won't be run. This prevents privilege escalation attacks if
the permissions of the control commands have been changed.
CMK-15318
Change-Id: Ie5de60541dbd76a983c9918ccf48a73ed1ee26f7
Commit: a7b083f28f71aae2e371a97a5ff22d966be6e89f
https://github.com/Checkmk/checkmk/commit/a7b083f28f71aae2e371a97a5ff22d966…
Author: Sofia Colakovic <sofia.colakovic(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16173
M agents/plugins/symantec_av
A tests/unit-shell/agents/plugins/test_symantec_av.sh
Log Message:
-----------
16173 SEC symantec_av: Don't run sav command if it isn't owned by root
Symantec Anti Virus plugin uses /opt/Symantec/symantec_antivirus/sav command
to monitor a Symantec Anti Virus installation.
To prevent privilege escalation, the plugin (which is run by root user) must
not run executables which can be changed by less privileged users.
In the default installation, sav command is owned by root and root is the only
user with write permissions, which prevents privilege escalation attacks.
With this Werk, the plugin checks if sav command is owned by root and root
is the only user with write permissions before running the command. If that's not
the case the command won't be run. This prevents privilege escalation attacks if
the permissions of the sav command have been changed.
We rate this with a CVSS of 0 (None) (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N).
This CVSS is primarily meant to please automatic scanners.
CMK-15318
Change-Id: I677d94136bd21cd54461f6e125764754208d99af
Commit: 6f906a28876a3615b19073494bc0ea8756cd9610
https://github.com/Checkmk/checkmk/commit/6f906a28876a3615b19073494bc0ea875…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
A tests/unit-shell/agents/plugins/test_common_plugin_parts.sh
Log Message:
-----------
Add test for common agent plugin code
Change-Id: Ibcb282c05186c80986d6eb2ad1689120cb72eeba
(cherry picked from commit 032044f7d7e05e46e441ef23ccb27293d1dc8644)
Commit: d55e24f61c51dedd96125eafd84ac06f9e0714ef
https://github.com/Checkmk/checkmk/commit/d55e24f61c51dedd96125eafd84ac06f9…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
M tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
Generalize common agent plugin code root_owned()
Pass permissions, owner and group directly and document arguments
Change-Id: I29095c316e1a4cd8bd234b65cbcfbc3867f2a693
Commit: 33ca1797bd16370609838a10a1346ec9f7cd3a58
https://github.com/Checkmk/checkmk/commit/33ca1797bd16370609838a10a1346ec9f…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16232
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/windows/plugins/mk_oracle.ps1
M tests/unit-shell/agents/plugins/test_mk_oracle.sh
Log Message:
-----------
16232 SEC mk_oracle(ps1): Prevent privilege esclation to root
Change-Id: Ia5305b388e6ca286a439a901855c3b83ffcd8d82
JIRA-Ref: CMK-15000
Commit: b00d634a143bcd9da8059263ecdee42247f41c27
https://github.com/Checkmk/checkmk/commit/b00d634a143bcd9da8059263ecdee4224…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16234
M agents/plugins/mk_oracle
Log Message:
-----------
16234 SEC Hide credentials in ps output for mk_oracle
Creds go to https://tonyhasler.wordpress.com/2008/10/15/hiding-sqlplus-passwords-from-p…
SUP-17435
Change-Id: I0588486baa975cf6e9f1e6b1bef693518194a094
JIRA-Ref: CMK-15000
Commit: 2bc11315273eb7bdbd3ca42f4d726527b204519e
https://github.com/Checkmk/checkmk/commit/2bc11315273eb7bdbd3ca42f4d726527b…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16198
M agents/plugins/mk_informix
Log Message:
-----------
mk_informix: Do not allow privilege escalation
The informix database monitoring plugin would previously `eval` statements parsed from `$INFORMIXDIR/bin/onstat`. Since the plugin is usually run as root, this could cause statements injected in `$INFORMIXDIR/bin/onstat` to be run as root as well.
By adding scripts named the same as other functionality found in `$PATH` to `$INFORMIXDIR/bin`, `$PATH` functionality could also be overshadowed and the custom executed as root.
Finally, `$INFORMIXDIR/bin/onstat` would be executed as root, allowing a substituted script to be run with elevated privileges.
With this werk, the environment variables will be exported instead and `$PATH` will now be searched before `$INFORMIXDIR/bin`.
The plugin will now also check if `$INFORMIXDIR/bin/onstat` belongs to root if the plugin is executed as root. If not, it will be executed as the user owning the executable.
Change-Id: Idfe1d31c80998c6067baa718df9fb0a5c293eb27
JIRA-Ref: CMK-15000
Commit: 79e692ed9a5b0c4ada54a1467939bd8451e96acb
https://github.com/Checkmk/checkmk/commit/79e692ed9a5b0c4ada54a1467939bd845…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/check_mk_agent.aix
M agents/check_mk_agent.freebsd
M agents/check_mk_agent.hpux
M agents/check_mk_agent.linux
M agents/check_mk_agent.macosx
M agents/check_mk_agent.netbsd
M agents/check_mk_agent.openbsd
M agents/check_mk_agent.openvms
M agents/check_mk_agent.openwrt
M agents/check_mk_agent.solaris
M agents/plugins/apache_status.py
M agents/plugins/asmcmd.sh
M agents/plugins/db2_mem
M agents/plugins/dnsclient
M agents/plugins/hpux_lunstats
M agents/plugins/hpux_statgrab
M agents/plugins/ibm_mq
M agents/plugins/isc_dhcpd.py
M agents/plugins/jar_signature
M agents/plugins/kaspersky_av
M agents/plugins/lnx_container_host_if.linux
M agents/plugins/lnx_quota
M agents/plugins/lvm
M agents/plugins/mailman2_lists
M agents/plugins/mailman3_lists
M agents/plugins/mk_apt
M agents/plugins/mk_ceph
M agents/plugins/mk_cups_queues
M agents/plugins/mk_db2.aix
M agents/plugins/mk_db2.linux
M agents/plugins/mk_docker.py
M agents/plugins/mk_errpt.aix
M agents/plugins/mk_filehandler
M agents/plugins/mk_filestats.py
M agents/plugins/mk_haproxy.freebsd
M agents/plugins/mk_informix
M agents/plugins/mk_inotify.py
M agents/plugins/mk_inventory.aix
M agents/plugins/mk_inventory.linux
M agents/plugins/mk_inventory.solaris
M agents/plugins/mk_iptables
M agents/plugins/mk_jolokia.py
M agents/plugins/mk_logins
M agents/plugins/mk_logwatch.py
M agents/plugins/mk_mongodb.py
M agents/plugins/mk_mysql
M agents/plugins/mk_nfsiostat
M agents/plugins/mk_omreport
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/plugins/mk_postgres.py
M agents/plugins/mk_redis
M agents/plugins/mk_sap.aix
M agents/plugins/mk_sap.py
M agents/plugins/mk_sap_hana
M agents/plugins/mk_saprouter
M agents/plugins/mk_scaleio
M agents/plugins/mk_site_object_counts
M agents/plugins/mk_sshd_config
M agents/plugins/mk_suseconnect
M agents/plugins/mk_tinkerforge.py
M agents/plugins/mk_tsm
M agents/plugins/mk_zypper
M agents/plugins/mtr.py
M agents/plugins/netstat.aix
M agents/plugins/netstat.linux
M agents/plugins/netstat.solaris
M agents/plugins/nfsexports
M agents/plugins/nfsexports.solaris
M agents/plugins/nginx_status.py
M agents/plugins/plesk_backups.py
M agents/plugins/plesk_domains.py
M agents/plugins/runas
M agents/plugins/smart
M agents/plugins/symantec_av
M agents/plugins/unitrends_backup
M agents/plugins/unitrends_replication.py
M agents/plugins/vxvm
M agents/plugins/websphere_mq
M agents/plugins/zorp
M agents/windows/plugins/ad_replication.bat
M agents/windows/plugins/arcserve_backup.ps1
M agents/windows/plugins/citrix_farm.ps1
M agents/windows/plugins/citrix_licenses.vbs
M agents/windows/plugins/citrix_xenapp.ps1
M agents/windows/plugins/hyperv_vms.ps1
M agents/windows/plugins/hyperv_vms_guestinfos.ps1
M agents/windows/plugins/iis_app_pool_state.ps1
M agents/windows/plugins/kaspersky_av_client.vbs
M agents/windows/plugins/mcafee_av_client.bat
M agents/windows/plugins/megaraid.bat
M agents/windows/plugins/mk_dhcp_enabled.bat
M agents/windows/plugins/mk_inventory.vbs
M agents/windows/plugins/mk_msoffice.ps1
M agents/windows/plugins/mk_mysql.vbs
M agents/windows/plugins/mk_oracle.ps1
M agents/windows/plugins/msexch_dag.ps1
M agents/windows/plugins/msexch_database.ps1
M agents/windows/plugins/mssql.vbs
M agents/windows/plugins/netstat_an.bat
M agents/windows/plugins/nvidia_smi.ps1
M agents/windows/plugins/rds_licenses.vbs
M agents/windows/plugins/rstcli.bat
M agents/windows/plugins/sansymphony.ps1
M agents/windows/plugins/storcli.bat
M agents/windows/plugins/tsm_checks.bat
M agents/windows/plugins/veeam_backup_status.ps1
M agents/windows/plugins/win_dhcp_pools.bat
M agents/windows/plugins/win_dmidecode.bat
M agents/windows/plugins/win_license.bat
M agents/windows/plugins/win_printers.ps1
M agents/windows/plugins/windows_broadcom_bonding.bat
M agents/windows/plugins/windows_if.ps1
M agents/windows/plugins/windows_intel_bonding.bat
M agents/windows/plugins/windows_multipath.vbs
M agents/windows/plugins/windows_os_bonding.ps1
M agents/windows/plugins/windows_tasks.ps1
M agents/windows/plugins/windows_updates.vbs
M agents/windows/plugins/wmic_if.bat
M agents/wnx/src/common/wnx_version.h
M bin/livedump
M bin/mkbackup
M cmk/special_agents/agent_jolokia.py
M cmk/special_agents/agent_netapp.py
M cmk/special_agents/agent_splunk.py
M cmk/special_agents/agent_vsphere.py
M cmk/utils/version.py
M configure.ac
M defines.make
M docker_image/Dockerfile
M packages/cmk-agent-ctl/src/constants.rs
Log Message:
-----------
Set version to 2.2.0p25
Change-Id: I511a4ab28bc793d71fdf7b4ec7db56ae24efbe60
Commit: cf3a68d23ba0b5066a1e28a2df0e771db6c1c2fc
https://github.com/Checkmk/checkmk/commit/cf3a68d23ba0b5066a1e28a2df0e771db…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
fix Oracle plugin for Windows
If run as admin and executable is NOT protected from non-admin write access then
1. write error:
XE|FAILURE|Safe execution is not possible: THE-HOST\THE-USER
has 'Write' access to 'c:\path\to\oracle\home\bin\sqlplus.exe'.
Either run the plugin as a user using the rule 'Run plugins and local checks
using non-system account' or disable 'Write', 'Modify' and 'Full control'
access to the by non-admin users.
2. continue to next instance
otherwise normal execution
TEST: Local manual using installed Windows agent and installed Oracle Express.
1. a user has write access: error similar to above mentioned
2. a user has no write access: no errors
Change-Id: I024ad7e2f4b7375624bc4c9175ad2ea4026a8835
Commit: 6cf5f81eb31a05ccb6948380e34557129363020f
https://github.com/Checkmk/checkmk/commit/6cf5f81eb31a05ccb6948380e34557129…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
fix and polish oracle powershell script
Now admin is correctly and consistently determined.
Change-Id: Iaae439d63afa9e58f3387d5ede3a31b0de2d7a93
Commit: 1336b200e55bde33421f07c755bd6337a21f508e
https://github.com/Checkmk/checkmk/commit/1336b200e55bde33421f07c755bd6337a…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
rebase correct fixes on correct code from the past
Based on mk_oracle.ps1 from 11c28303
Changes:
- skip ALL changes from the `16232 SEC mk_oracle(ps1)`:
SEC CL breaks async monitoring too
- If run as admin and executable is NOT protected from non-admin write access then
1. write error:
XE|FAILURE|Safe execution is not possible: THE-HOST\THE-USER
has 'Write' access to 'c:\path\to\oracle\home\bin\sqlplus.exe'.
Either run the plugin as a user using the rule 'Run plugins and local checks
using non-system account' or disable 'Write', 'Modify' and 'Full control'
access to the by non-admin users.
2. continue to next instance
else
normal execution
- add possibility to silent log in file - internal tools
- use global temp for non-admin mode
Tests. Manual
Change-Id: I60685c102c40f979b3941f7a6af1a21d9852ae52
Commit: 1669273db9f20971edbe1fb3b32e976cf1deb486
https://github.com/Checkmk/checkmk/commit/1669273db9f20971edbe1fb3b32e976cf…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
fix user message in mk_oracle.ps1
Change-Id: Iab44faae665b02db63bfdd204d59aa0ff9d6ec94
Commit: 29bf6df3f194fc5efd2e6110f863ddc277f8355d
https://github.com/Checkmk/checkmk/commit/29bf6df3f194fc5efd2e6110f863ddc27…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
use SID instead of names in mk_oracle.ps1
Change-Id: Ia2503e3f60ee44098bb4ef9d5d26ddc49fa7d354
Commit: 8870893c6547bafaeaf49a6ac4c8da74cebec2f0
https://github.com/Checkmk/checkmk/commit/8870893c6547bafaeaf49a6ac4c8da74c…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: assume 'Domain Admins' and 'Enterprise Admins' are safe
Change-Id: I7efd9e4bddbdf4fc137518191a7f381ca6bbab23
Commit: be0065240a394c649825147861f4838969a74e55
https://github.com/Checkmk/checkmk/commit/be0065240a394c649825147861f483896…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: use sid instead of name
Change-Id: Ia57a97eb85ec889b9fa71f1fea4d123228e9b71f
Commit: c6a88a5e9f619b101fb8866d2b222162e37b42f3
https://github.com/Checkmk/checkmk/commit/c6a88a5e9f619b101fb8866d2b222162e…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: extend checking permissions on tnsping and crsctl
- also tolerant if file missing
Change-Id: I47f755c5c8ec1d87b733d3014ed5f6550aae8857
Commit: 4b8b69cc872d14c642c55f76cc0186cf1138dc49
https://github.com/Checkmk/checkmk/commit/4b8b69cc872d14c642c55f76cc0186cf1…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15843
Log Message:
-----------
15843 FIX mk_oracle(ps1): Follow-up to privilege escalation fix
Change-Id: I1d2f868b41fc6953ee6ded387deeb835eda088f6
Commit: f38580718435c29dd841e4c85f07fa91711428b3
https://github.com/Checkmk/checkmk/commit/f38580718435c29dd841e4c85f07fa917…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/wnx/src/common/wtools.cpp
M agents/wnx/src/engine/stdafx_defines.h
M agents/wnx/src/main/pch.h
M agents/wnx/watest/test-wtools_runas.cpp
Log Message:
-----------
wa: rewrite group user test in RunAs
needed by Oracle upcoming changes
Change-Id: Ic40aab9166f597a034a8478158dc1465b26f1940
Commit: 1b025add1fa88a7a6eba8dc893c280c4701ca644
https://github.com/Checkmk/checkmk/commit/1b025add1fa88a7a6eba8dc893c280c47…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: add possibility to skip oracle permission check
Change-Id: I090e1d432df2a8258dcefded532109568e70ec4d
Commit: 320f8dd5bd63b907f8ae0ba51357f272510835f9
https://github.com/Checkmk/checkmk/commit/320f8dd5bd63b907f8ae0ba51357f2725…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: change error message
Change-Id: Ic19b42d95fbd44ca17b0339620ae01bf76227cdb
Commit: 0f8a193afe69da9ff0b5b95b0d8541d6cceaf091
https://github.com/Checkmk/checkmk/commit/0f8a193afe69da9ff0b5b95b0d8541d6c…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: add `safe list of regexs entries`
Can be used to skip permission security check for
some users or groups specified with a list of regex
Change-Id: Ia3361140f5d72e45ffe32cd717381f4a2a469439
Commit: bcb2a699a44326dd84ad4842b6cf4fbbeed330d6
https://github.com/Checkmk/checkmk/commit/bcb2a699a44326dd84ad4842b6cf4fbbe…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: fix regex check
Change-Id: Ia85b8cf25b565e52a04ab7fef949552ac71fe2d2
Commit: 7f406c83b66d7df2c7e1518e9c51d71b1d94aad5
https://github.com/Checkmk/checkmk/commit/7f406c83b66d7df2c7e1518e9c51d71b1…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: remove regex check
- according to discussion with LM and HR.
- added mention about Oracle permission check in error message
Change-Id: If9ad546f4e1fe30668a1b2f12185875e55a25248
Commit: 7ce4e6a7cd3e42400c42f6037cf6c1ce2a433b5a
https://github.com/Checkmk/checkmk/commit/7ce4e6a7cd3e42400c42f6037cf6c1ce2…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: typo
Change-Id: Id3a5d73d036b953f01b96a14f721e40c49102f16
Commit: 9bd5f5fa45ed4d5362f2a6a74a0ba8790785c0d7
https://github.com/Checkmk/checkmk/commit/9bd5f5fa45ed4d5362f2a6a74a0ba8790…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M .werks/15843
Log Message:
-----------
oracle: fix Windows werk text according current status
Change-Id: Id06b317aca90f1bcb127ac69f443b906db1edb1f
Commit: 34eb74e33404d391304d15a1566a9d0a39b81dee
https://github.com/Checkmk/checkmk/commit/34eb74e33404d391304d15a1566a9d0a3…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: add minor fixes
Name of check is fixed, must be in full sync with WATO:
This is not perfect solution, we will fix it 2.3
Some comments added to make logic more clear.
Change-Id: I4e86dbed2616000fc4e9c35c079d82f4a9bddffa
Commit: ec67fd9eda5c1517c9c09313fc220109967ac25f
https://github.com/Checkmk/checkmk/commit/ec67fd9eda5c1517c9c09313fc2201099…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/wnx/src/common/wtools.cpp
Log Message:
-----------
wa: set max length of the user name to 20
Some Windows in some cases may support only
very short name
Change-Id: I71360694c1c729723ba5420470b87d02078a3026
Commit: 8e52fa24c31d14c7cab72e249c5153fcca2935a0
https://github.com/Checkmk/checkmk/commit/8e52fa24c31d14c7cab72e249c5153fcc…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/wnx/src/common/wtools.cpp
Log Message:
-----------
wa: replace space with underscore in user names
Change-Id: I076298da6a4cee7b796400dff9bfd35d1d49993a
Commit: 981d47397296e694ba9802926de9734c21a7be40
https://github.com/Checkmk/checkmk/commit/981d47397296e694ba9802926de9734c2…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix syntax errors on mk_oracle agent plugin
SUP-18082
Change-Id: Ica669024b54ac727161df2f1c990574797d3ab11
Commit: 3d13eb42f88f63896682bb56e0b7425fb93a4ae0
https://github.com/Checkmk/checkmk/commit/3d13eb42f88f63896682bb56e0b7425fb…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix broken pipe
SUP-18105
Change-Id: Ief4a607c11cc8235e47512826eb1e57d7583fd66
Commit: b2e2856e3a1aa6529768349896f60b294a94a87d
https://github.com/Checkmk/checkmk/commit/b2e2856e3a1aa6529768349896f60b294…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/kaspersky_av
M agents/plugins/mk_informix
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
Log Message:
-----------
extract parts of get_binary_execution_mode
this will be needed for permission checking in mk_oracle
Change-Id: I6bce1ba2abb5fe0e0588af9d25aa8ab53b0499f7
Commit: 09a18128ccc414e7db7ea7da7d0eff5d732299cf
https://github.com/Checkmk/checkmk/commit/09a18128ccc414e7db7ea7da7d0eff5d7…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
use $GREP instead of grep
Change-Id: I442549d24e1d3b13b6393d88ef552c963b9ef602
Commit: 91a605204e99551b6860e5b6b84e3da7be1a5c85
https://github.com/Checkmk/checkmk/commit/91a605204e99551b6860e5b6b84e3da7b…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15330
M agents/plugins/mk_oracle
Log Message:
-----------
15330 FIX mk_oracle: report failed login
Due to fixes introduced with
<a href="https://checkmk.com/werk/16234">Werk #16234</a> a failed login to the
oracle database was not reported as critical, but the services were going
stale. This is now fixed.
Change-Id: Iae9f9232b9e48d00b752987a0f2dae9a7fa91e0d
Commit: 5385b37fea9eef7b5f64a9e97e9a18ed870d0356
https://github.com/Checkmk/checkmk/commit/5385b37fea9eef7b5f64a9e97e9a18ed8…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
provide hints for changing permissions
Change-Id: I956b7e2f212a92db3128f3e9ed2c4a952246379a
Commit: 3cd89784f2c1708d3a09d6bbaf79243738f58d2d
https://github.com/Checkmk/checkmk/commit/3cd89784f2c1708d3a09d6bbaf7924373…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15327
Log Message:
-----------
15327 FIX mk_oracle: Follow-up to privilege escalation fix
Add werk for mk_oracle related changes
Change-Id: I8ca91c3d189c2b2cb997a120961dbb5428e2d25b
Commit: 18e6f3451355b5890fcd0eab362f646ed974efbe
https://github.com/Checkmk/checkmk/commit/18e6f3451355b5890fcd0eab362f646ed…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15328
M agents/plugins/mk_oracle
Log Message:
-----------
15328 FIX mk_oracle: Follow-up to privilege escalation fix: sqlnet.ora
Change-Id: I30378fbf37c3b9735fd2bb396f376eca9e1de70c
Commit: 2f4013837a88ed68816d4f9b4e00968d73cb4408
https://github.com/Checkmk/checkmk/commit/2f4013837a88ed68816d4f9b4e00968d7…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15329
M checks/oracle_recovery_area
M cmk/base/plugins/agent_based/oracle_processes.py
Log Message:
-----------
15329 FIX mk_oracle: fix two parse errors
refs CMK-16766
Change-Id: Ia1e9dcc1e73cd2ef0129a07a9402997786544deb
Commit: fc6889cf7e8cd96d00c890963c5f7fb141f76d85
https://github.com/Checkmk/checkmk/commit/fc6889cf7e8cd96d00c890963c5f7fb14…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: ignore deleted accounts in safety check
added check for null value: discovered by JPH only machine
Change-Id: Id1e119dccffaae6bec9013ca17f4aee4373d6847
Commit: 463fb8fdc5a57da98c1ae7fd8ea4ca4d7f36172d
https://github.com/Checkmk/checkmk/commit/463fb8fdc5a57da98c1ae7fd8ea4ca4d7…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
export needs_user_switch_before_executing function
Change-Id: Idd4e13c9f798ec7fab2b9fe815a58b1c19638c7d
Commit: 65236b565e0f57dd058f395704b20154aff30847
https://github.com/Checkmk/checkmk/commit/65236b565e0f57dd058f395704b20154a…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-19 (Fri, 19 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: fix message
Change-Id: I7bd2951bb1fef350afddc78d985f1de1fd4cd3ab
Compare: https://github.com/Checkmk/checkmk/compare/9c338a65a6db...65236b565e0f
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications
Branch: refs/heads/release/2.3.0b6
Home: https://github.com/Checkmk/checkmk
Commit: 9d4a7f6c2ea64f65efcfb78962433d02050c066d
https://github.com/Checkmk/checkmk/commit/9d4a7f6c2ea64f65efcfb78962433d020…
Author: Moritz Kiemer <moritz.kiemer(a)checkmk.com>
Date: 2024-04-24 (Wed, 24 Apr 2024)
Changed paths:
M cmk/base/core_config.py
M tests/unit/cmk/base/test_core_config.py
Log Message:
-----------
config generation: recompute passwords
This ensures the passwords file is up to date and consistent,
for instance after an update.
Change-Id: I2f8cb14ed7fa01cd5de7804412f3141ff1d082d1
Commit: a140932c63e875e0df59c0ea598bb4d766c5ef5c
https://github.com/Checkmk/checkmk/commit/a140932c63e875e0df59c0ea598bb4d76…
Author: Lars Michelsen <lm(a)checkmk.com>
Date: 2024-04-24 (Wed, 24 Apr 2024)
Changed paths:
M cmk/gui/valuespec.py
Log Message:
-----------
Fix broken "Check HTTP service (deprecated)" rule configuration
CMK-17097
Change-Id: I24d2e8c91f1375d4c41d9321a0c8976e13eebd08
Commit: f5193cffdba654c5245127d7cd7af6f8bb0b26ed
https://github.com/Checkmk/checkmk/commit/f5193cffdba654c5245127d7cd7af6f8b…
Author: David Gervasoni <david.gervasoni(a)checkmk.com>
Date: 2024-04-24 (Wed, 24 Apr 2024)
Changed paths:
A .werks/16762.md
M cmk/plugins/collection/rulesets/cert.py
M tests/unit/cmk/plugins/collection/rulesets/test_cert.py
Log Message:
-----------
16762 FIX check certificates: fix signature algorithm configuration
Change-Id: I6c949f8f911d054260a102bb5e7b7b2a38da91fc
Commit: 64a42ebbba10c17c1d4b092b2ae3b0cebd13d472
https://github.com/Checkmk/checkmk/commit/64a42ebbba10c17c1d4b092b2ae3b0ceb…
Author: Moritz Kiemer <moritz.kiemer(a)checkmk.com>
Date: 2024-04-24 (Wed, 24 Apr 2024)
Changed paths:
M cmk/base/automations/check_mk.py
M cmk/base/checkers.py
M cmk/base/dump_host.py
M cmk/base/modes/check_mk.py
M cmk/base/sources/_builder.py
M tests/unit/cmk/base/sources/test_data_sources.py
Log Message:
-----------
untangle passwords
During Fetcher config reation, we need to use the _path_ of the
core config, but the _passwors_ from the live config.
Change-Id: Ia1546c4798c0dc9817c79cd350651d9297354844
Compare: https://github.com/Checkmk/checkmk/compare/fc4f1f96186b...64a42ebbba10
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications
Branch: refs/heads/master
Home: https://github.com/Checkmk/checkmk
Commit: 65219b03ea29ba856539d3147a862a7b5087fe6e
https://github.com/Checkmk/checkmk/commit/65219b03ea29ba856539d3147a862a7b5…
Author: Moritz Kiemer <moritz.kiemer(a)checkmk.com>
Date: 2024-05-28 (Tue, 28 May 2024)
Changed paths:
M cmk/base/plugins/agent_based/ps_check.py
M cmk/plugins/lib/ps.py
M tests/unit/cmk/base/plugins/agent_based/test_ps_check.py
M tests/unit/cmk/gui/plugins/wato/check_parameters/test_plugin_vs_wato.py
M tests/unit/cmk/plugins/lib/test_ps.py
Log Message:
-----------
fix default params: ps
Change-Id: Idf87a2ee7ddbab98dd89040191fd5631d62ebfb3
Commit: 23fd1b7eda27b8b752365dcb7bb9906d54198dc5
https://github.com/Checkmk/checkmk/commit/23fd1b7eda27b8b752365dcb7bb9906d5…
Author: Moritz Kiemer <moritz.kiemer(a)checkmk.com>
Date: 2024-05-28 (Tue, 28 May 2024)
Changed paths:
M cmk/base/legacy_checks/pulse_secure_mem_util.py
M cmk/base/plugins/agent_based/pulse_secure_users.py
M cmk/gui/plugins/wato/check_parameters/pulse_secure.py
M tests/unit/cmk/base/plugins/agent_based/test_pulse_secure_users.py
M tests/unit/cmk/gui/plugins/wato/check_parameters/test_plugin_vs_wato.py
Log Message:
-----------
fix default params: pulse_secure
Change-Id: I1c425ea55771aeb510e191dd3d911b53e08c820d
Commit: 657fbd923aae876ce47ca436bb99f1aa0877f17e
https://github.com/Checkmk/checkmk/commit/657fbd923aae876ce47ca436bb99f1aa0…
Author: Moritz Kiemer <moritz.kiemer(a)checkmk.com>
Date: 2024-05-28 (Tue, 28 May 2024)
Changed paths:
M cmk/base/legacy_checks/redis_info.py
M tests/unit/cmk/gui/plugins/wato/check_parameters/test_plugin_vs_wato.py
Log Message:
-----------
fix default params: redis_info_persistence
Change-Id: I2a0fe9f3ff8b0940cc81374e8d3a3aff026c028a
Commit: 2f3176c5e1ff61f800751a29c05a673f828ba1cd
https://github.com/Checkmk/checkmk/commit/2f3176c5e1ff61f800751a29c05a673f8…
Author: Moritz Kiemer <moritz.kiemer(a)checkmk.com>
Date: 2024-05-28 (Tue, 28 May 2024)
Changed paths:
M cmk/base/legacy_checks/skype.py
M tests/unit/cmk/gui/plugins/wato/check_parameters/test_plugin_vs_wato.py
Log Message:
-----------
fix default params: skype
Change-Id: Ic7b1a4513eb488b775582d82df59b0c81e03debc
Commit: 2631c197b0c29be1735d5da1bc4968416cb9eedc
https://github.com/Checkmk/checkmk/commit/2631c197b0c29be1735d5da1bc4968416…
Author: Moritz Kiemer <moritz.kiemer(a)checkmk.com>
Date: 2024-05-28 (Tue, 28 May 2024)
Changed paths:
R cmk/base/plugins/agent_based/globalprotect_utilization.py
R cmk/base/plugins/agent_based/graylog_alerts.py
R cmk/base/plugins/agent_based/graylog_events.py
R cmk/base/plugins/agent_based/graylog_failures.py
R cmk/base/plugins/agent_based/graylog_streams.py
A cmk/plugins/collection/agent_based/globalprotect_utilization.py
A cmk/plugins/collection/agent_based/graylog_alerts.py
A cmk/plugins/collection/agent_based/graylog_events.py
A cmk/plugins/collection/agent_based/graylog_failures.py
A cmk/plugins/collection/agent_based/graylog_streams.py
R tests/unit/cmk/base/plugins/agent_based/test_globalprotect_utilization.py
R tests/unit/cmk/base/plugins/agent_based/test_graylog_alerts.py
R tests/unit/cmk/base/plugins/agent_based/test_graylog_events.py
R tests/unit/cmk/base/plugins/agent_based/test_graylog_failures.py
R tests/unit/cmk/base/plugins/agent_based/test_graylog_streams.py
A tests/unit/cmk/plugins/collection/agent_based/test_globalprotect_utilization.py
A tests/unit/cmk/plugins/collection/agent_based/test_graylog_alerts.py
A tests/unit/cmk/plugins/collection/agent_based/test_graylog_events.py
A tests/unit/cmk/plugins/collection/agent_based/test_graylog_failures.py
A tests/unit/cmk/plugins/collection/agent_based/test_graylog_streams.py
Log Message:
-----------
agent_based migration: g*
Change-Id: I83ac3b7f3a76ae8e43be288d0f500128253a1672
Compare: https://github.com/Checkmk/checkmk/compare/0608b85b178a...2631c197b0c2
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications
Branch: refs/heads/2.3.0
Home: https://github.com/Checkmk/checkmk
Commit: 8096e67c7470a987d33d4c652d7bd31f92e00be0
https://github.com/Checkmk/checkmk/commit/8096e67c7470a987d33d4c652d7bd31f9…
Author: Hannes Rantzsch <hannes.rantzsch(a)checkmk.com>
Date: 2024-05-28 (Tue, 28 May 2024)
Changed paths:
A .werks/15200.md
M active_checks/check_sftp
A cmk/active_checks/check_sftp.py
M cmk/gui/plugins/wato/active_checks/sftp.py
A tests/unit/cmk/active_checks/test_check_sftp.py
Log Message:
-----------
15200 SEC Restrict check_sftp local paths
check_sftp now only allows uploading files from and downloading files to
a dedicated directory in SITE_HOME/var. While the names and general
meaning of the command line arguments remain unchanged, paths are now
always interpreted relative to that dedicated directory.
Attempting to escape from this directory (path traversal) will cause the
check to abort and fail.
Change-Id: Iaa369dfbfdad9140fb8367514fd68a578b40c5e8
To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications