Branch: refs/heads/master
Home:
https://github.com/tribe29/checkmk
Commit: 865aec196197101db55f1225b19d5d6fd0b91366
https://github.com/tribe29/checkmk/commit/865aec196197101db55f1225b19d5d6fd…
Author: Andreas Umbreit <andreas.umbreit(a)tribe29.com>
Date: 2022-12-16 (Fri, 16 Dec 2022)
Changed paths:
A .werks/14962
M agents/Makefile
M agents/check-mk-agent.spec
M agents/scripts/super-server/0_systemd/setup
M tests/unit-shell/agents/scripts/super-server/0_systemd/test_setup.sh
Log Message:
-----------
14962 FIX Running cmk-agent-ctl leads to segfault on SELinux systems
When installing an RPM agent package including the agent controller
(prepackaged agent package or agent bakery package), running the
<tt>cmk-agent-ctl</tt>
executable did fail on some systems with active SELinux.
This lead to an installation without active controller, and thus without TLS encryption.
Affected systems include, but are not limited to, RHEL9 and derivates.
The root cause for this problem was that the controller was shipped as a UPX-compressed
executable, which required text-relocation on execution. Further details can be found at
this forum discussion:
https://forum.checkmk.com/t/cmk-agent-ctl-segmentation-fault-on-rocky-linux…
To fix this problem, we now avoid to compress the agent controller with UPX. Instead, the
cmk-agent-ctl executable is shipped as a gzip-archive and gets uncompressed on package
installation.
You can fix your existing agent installations by updating with a new agent package. With
activated
automatic updates, this should happen automatically after baking agents.
CMK-11662
Change-Id: Icf9729b978bb8259226c9b5f54216f71ba39395b