17 Jun
2024
17 Jun
'24
2:56 a.m.
Branch: refs/heads/release/2.1.0p42
Home: https://github.com/Checkmk/checkmk
Commit: 0a183bed64ef9d9be219a94ac134aabd35b1f1b5
https://github.com/Checkmk/checkmk/commit/0a183bed64ef9d9be219a94ac134aabd3…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A tests/agent-unit/test_common_plugin_parts.sh
Log Message:
-----------
Add test for common agent plugin code
Change-Id: Ibcb282c05186c80986d6eb2ad1689120cb72eeba
Commit: d00c016b6e747d4374378d465d34bfc297c56a4d
https://github.com/Checkmk/checkmk/commit/d00c016b6e747d4374378d465d34bfc29…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
A tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
Generalize common agent plugin code
Pass permissions, owner and group directly and document arguments
Change-Id: I29095c316e1a4cd8bd234b65cbcfbc3867f2a693
Commit: a5af31b34d0275670a30ce788091c779f762e7ad
https://github.com/Checkmk/checkmk/commit/a5af31b34d0275670a30ce788091c779f…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16232
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/windows/plugins/mk_oracle.ps1
M tests/unit-shell/agents/plugins/test_mk_oracle.sh
Log Message:
-----------
16232 SEC mk_oracle(ps1): Prevent privilege esclation to root
Change-Id: Ia5305b388e6ca286a439a901855c3b83ffcd8d82
JIRA-Ref: CMK-15000
Commit: 62b7707ef17dbb709448ef91a60a57d127a7ba77
https://github.com/Checkmk/checkmk/commit/62b7707ef17dbb709448ef91a60a57d12…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16234
M agents/plugins/mk_oracle
Log Message:
-----------
16234 SEC Hide credentials in ps output for mk_oracle
Creds go to
https://tonyhasler.wordpress.com/2008/10/15/hiding-sqlplus-passwords-from-p…
SUP-17435
Change-Id: I0588486baa975cf6e9f1e6b1bef693518194a094
JIRA-Ref: CMK-15000
Commit: af4e3954db8ca8975f5811c769e1ef17953ecd7d
https://github.com/Checkmk/checkmk/commit/af4e3954db8ca8975f5811c769e1ef179…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16198
M agents/plugins/mk_informix
Log Message:
-----------
mk_informix: Do not allow privilege escalation
The informix database monitoring plugin would previously `eval` statements parsed from
`$INFORMIXDIR/bin/onstat`. Since the plugin is usually run as root, this could cause
statements injected in `$INFORMIXDIR/bin/onstat` to be run as root as well.
By adding scripts named the same as other functionality found in `$PATH` to
`$INFORMIXDIR/bin`, `$PATH` functionality could also be overshadowed and the custom
executed as root.
Finally, `$INFORMIXDIR/bin/onstat` would be executed as root, allowing a substituted
script to be run with elevated privileges.
With this werk, the environment variables will be exported instead and `$PATH` will now be
searched before `$INFORMIXDIR/bin`.
The plugin will now also check if `$INFORMIXDIR/bin/onstat` belongs to root if the plugin
is executed as root. If not, it will be executed as the user owning the executable.
Change-Id: Idfe1d31c80998c6067baa718df9fb0a5c293eb27
Commit: e2eade78af23f87fbede15494abae610346c04b1
https://github.com/Checkmk/checkmk/commit/e2eade78af23f87fbede15494abae6103…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/check_mk_agent.aix
M agents/check_mk_agent.freebsd
M agents/check_mk_agent.hpux
M agents/check_mk_agent.linux
M agents/check_mk_agent.macosx
M agents/check_mk_agent.netbsd
M agents/check_mk_agent.openbsd
M agents/check_mk_agent.openvms
M agents/check_mk_agent.openwrt
M agents/check_mk_agent.solaris
M agents/cmk-agent-ctl/src/constants.rs
M agents/plugins/apache_status.py
M agents/plugins/asmcmd.sh
M agents/plugins/db2_mem
M agents/plugins/dnsclient
M agents/plugins/hpux_lunstats
M agents/plugins/hpux_statgrab
M agents/plugins/ibm_mq
M agents/plugins/isc_dhcpd.py
M agents/plugins/jar_signature
M agents/plugins/kaspersky_av
M agents/plugins/lnx_container_host_if.linux
M agents/plugins/lnx_quota
M agents/plugins/lvm
M agents/plugins/mailman_lists
M agents/plugins/mk_apt
M agents/plugins/mk_ceph
M agents/plugins/mk_cups_queues
M agents/plugins/mk_db2.aix
M agents/plugins/mk_db2.linux
M agents/plugins/mk_docker.py
M agents/plugins/mk_errpt.aix
M agents/plugins/mk_filehandler
M agents/plugins/mk_filestats.py
M agents/plugins/mk_haproxy.freebsd
M agents/plugins/mk_informix
M agents/plugins/mk_inotify.py
M agents/plugins/mk_inventory.aix
M agents/plugins/mk_inventory.linux
M agents/plugins/mk_inventory.solaris
M agents/plugins/mk_iptables
M agents/plugins/mk_jolokia.py
M agents/plugins/mk_logins
M agents/plugins/mk_logwatch.py
M agents/plugins/mk_mongodb.py
M agents/plugins/mk_mysql
M agents/plugins/mk_nfsiostat
M agents/plugins/mk_omreport
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/plugins/mk_postgres.py
M agents/plugins/mk_redis
M agents/plugins/mk_sap.aix
M agents/plugins/mk_sap.py
M agents/plugins/mk_sap_hana
M agents/plugins/mk_saprouter
M agents/plugins/mk_scaleio
M agents/plugins/mk_site_object_counts
M agents/plugins/mk_sshd_config
M agents/plugins/mk_suseconnect
M agents/plugins/mk_tinkerforge.py
M agents/plugins/mk_tsm
M agents/plugins/mk_zypper
M agents/plugins/mtr.py
M agents/plugins/netstat.aix
M agents/plugins/netstat.linux
M agents/plugins/netstat.solaris
M agents/plugins/nfsexports
M agents/plugins/nfsexports.solaris
M agents/plugins/nginx_status.py
M agents/plugins/plesk_backups.py
M agents/plugins/plesk_domains.py
M agents/plugins/runas
M agents/plugins/smart
M agents/plugins/symantec_av
M agents/plugins/unitrends_backup
M agents/plugins/unitrends_replication.py
M agents/plugins/vxvm
M agents/plugins/websphere_mq
M agents/plugins/zorp
M agents/windows/plugins/ad_replication.bat
M agents/windows/plugins/arcserve_backup.ps1
M agents/windows/plugins/citrix_farm.ps1
M agents/windows/plugins/citrix_licenses.vbs
M agents/windows/plugins/citrix_xenapp.ps1
M agents/windows/plugins/hyperv_vms.ps1
M agents/windows/plugins/hyperv_vms_guestinfos.ps1
M agents/windows/plugins/iis_app_pool_state.ps1
M agents/windows/plugins/kaspersky_av_client.vbs
M agents/windows/plugins/mcafee_av_client.bat
M agents/windows/plugins/megaraid.bat
M agents/windows/plugins/mk_dhcp_enabled.bat
M agents/windows/plugins/mk_inventory.vbs
M agents/windows/plugins/mk_msoffice.ps1
M agents/windows/plugins/mk_mysql.vbs
M agents/windows/plugins/mk_oracle.ps1
M agents/windows/plugins/msexch_dag.ps1
M agents/windows/plugins/msexch_database.ps1
M agents/windows/plugins/mssql.vbs
M agents/windows/plugins/netstat_an.bat
M agents/windows/plugins/rds_licenses.vbs
M agents/windows/plugins/rstcli.bat
M agents/windows/plugins/sansymphony.ps1
M agents/windows/plugins/storcli.bat
M agents/windows/plugins/tsm_checks.bat
M agents/windows/plugins/veeam_backup_status.ps1
M agents/windows/plugins/win_dhcp_pools.bat
M agents/windows/plugins/win_dmidecode.bat
M agents/windows/plugins/win_license.bat
M agents/windows/plugins/win_printers.ps1
M agents/windows/plugins/windows_broadcom_bonding.bat
M agents/windows/plugins/windows_if.ps1
M agents/windows/plugins/windows_intel_bonding.bat
M agents/windows/plugins/windows_multipath.vbs
M agents/windows/plugins/windows_os_bonding.ps1
M agents/windows/plugins/windows_tasks.ps1
M agents/windows/plugins/windows_updates.vbs
M agents/windows/plugins/wmic_if.bat
M agents/wnx/src/common/wnx_version.h
M bin/livedump
M bin/mkbackup
M bin/mkbench
M cmk/utils/version.py
M configure.ac
M defines.make
M docker/Dockerfile
M enterprise/agents/plugins/cmk_update_agent.py
M enterprise/bin/cmcdump
Log Message:
-----------
Set version to 2.1.0p42
Change-Id: I3bda786ccf346c37626e9e4bf624281f6263f4fc
Commit: f719a11c1fd35693eb5e098677e8168a2ae558c2
https://github.com/Checkmk/checkmk/commit/f719a11c1fd35693eb5e098677e8168a2…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix syntax errors on mk_oracle agent plugin
SUP-18082
Change-Id: Ica669024b54ac727161df2f1c990574797d3ab11
Commit: 70e27ba3e18ec2ec2ebd313bed8624e871b4ea29
https://github.com/Checkmk/checkmk/commit/70e27ba3e18ec2ec2ebd313bed8624e87…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix broken pipe
SUP-18105
Change-Id: Ief4a607c11cc8235e47512826eb1e57d7583fd66
Commit: 4e28194dd91ce88c42039a283f612f7101b3cafd
https://github.com/Checkmk/checkmk/commit/4e28194dd91ce88c42039a283f612f710…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/kaspersky_av
M agents/plugins/mk_informix
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
Log Message:
-----------
extract parts of get_binary_execution_mode
this will be needed for permission checking in mk_oracle
Change-Id: I6bce1ba2abb5fe0e0588af9d25aa8ab53b0499f7
Commit: a0dbb41445e537c205f4a7ae77a1a4496a3bda4d
https://github.com/Checkmk/checkmk/commit/a0dbb41445e537c205f4a7ae77a1a4496…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
use $GREP instead of grep
Change-Id: I442549d24e1d3b13b6393d88ef552c963b9ef602
Commit: cfb9481f9a4f05db61e6e6b26e562598c5d8842b
https://github.com/Checkmk/checkmk/commit/cfb9481f9a4f05db61e6e6b26e562598c…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15330
M agents/plugins/mk_oracle
Log Message:
-----------
15330 FIX mk_oracle: report failed login
Due to fixes introduced with
<a href="https://checkmk.com/werk/16234">Werk #16234</a> a failed
login to the
oracle database was not reported as critical, but the services were going
stale. This is now fixed.
Change-Id: Iae9f9232b9e48d00b752987a0f2dae9a7fa91e0d
Commit: 13ff15eea507564130c0ba284c4aa4754d52a57f
https://github.com/Checkmk/checkmk/commit/13ff15eea507564130c0ba284c4aa4754…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
provide hints for changing permissions
Change-Id: I956b7e2f212a92db3128f3e9ed2c4a952246379a
Commit: eab9b3bb1f41555fc9d4b5e52f367f3aebe73f7a
https://github.com/Checkmk/checkmk/commit/eab9b3bb1f41555fc9d4b5e52f367f3ae…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15327
Log Message:
-----------
15327 FIX mk_oracle: Follow-up to privilege escalation fix
Add werk for mk_oracle related changes
Change-Id: I8ca91c3d189c2b2cb997a120961dbb5428e2d25b
Commit: a691fc3faaa37b3a08cd0f3dba1063abecd21bba
https://github.com/Checkmk/checkmk/commit/a691fc3faaa37b3a08cd0f3dba1063abe…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15328
M agents/plugins/mk_oracle
M enterprise/cmk/base/cee/plugins/bakery/mk_oracle.py
M enterprise/cmk/gui/cee/plugins/wato/agent_bakery/rulespecs/mk_oracle.py
M tests/unit/cmk/base/cee/plugins/bakery/mk_oracle.py
Log Message:
-----------
15328 FIX mk_oracle: Follow-up to privilege escalation fix: sqlnet.ora
Change-Id: I30378fbf37c3b9735fd2bb396f376eca9e1de70c
Commit: 8a5382aa7a4d9e29e5bff3f3c6c5a8e0bee6914f
https://github.com/Checkmk/checkmk/commit/8a5382aa7a4d9e29e5bff3f3c6c5a8e0b…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15329
M checks/oracle_processes
M checks/oracle_recovery_area
Log Message:
-----------
15329 FIX mk_oracle: fix two parse errors
refs CMK-16766
Change-Id: Ia1e9dcc1e73cd2ef0129a07a9402997786544deb
Commit: 596d63497ab0636be35a124eae842a1d33ec1e66
https://github.com/Checkmk/checkmk/commit/596d63497ab0636be35a124eae842a1d3…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
export needs_user_switch_before_executing function
Change-Id: Idd4e13c9f798ec7fab2b9fe815a58b1c19638c7d
Commit: e6547a9eb0b0ec8e4e343ce5f5df582618963452
https://github.com/Checkmk/checkmk/commit/e6547a9eb0b0ec8e4e343ce5f5df58261…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15843
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
15843 FIX mk_oracle(ps1): Follow-up to privilege escalation fix
Change-Id: I1d2f868b41fc6953ee6ded387deeb835eda088f6
Commit: 2a4b15ff7de93abbb8e259863f65952651c55cfb
https://github.com/Checkmk/checkmk/commit/2a4b15ff7de93abbb8e259863f6595265…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M .werks/15843
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
oracle: fix mk_oracle.ps1 and werk
Change-Id: Ica1fb33144cd3f7f437d6f1d5420939c1d391b84
Commit: 4c8036e85f8869e806b3652727de481397cfba5a
https://github.com/Checkmk/checkmk/commit/4c8036e85f8869e806b3652727de48139…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M enterprise/cmk/base/cee/plugins/bakery/mk_oracle.py
M enterprise/cmk/gui/cee/plugins/wato/agent_bakery/rulespecs/mk_oracle.py
M tests/unit/cmk/base/cee/plugins/bakery/mk_oracle.py
Log Message:
-----------
mk_oracle.ps1: add in WATO oracle permission management
add possibility to manage Oracle binaries security check:
disable at all or add some users to white list
Change-Id: I1798216502ab5544eacfa623b1ed12bb455bf0f7
Commit: 3170b5055606e740d3baaa8bc1a27751a3f66d46
https://github.com/Checkmk/checkmk/commit/3170b5055606e740d3baaa8bc1a27751a…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M Pipfile
M Pipfile.lock
R omd/packages/python3-modules/github-com.pem
M omd/packages/python3-modules/python3-modules.make
Log Message:
-----------
Update pymssql
... and remove building from github
Change-Id: Iae02683fe176a02c2e1c5d7b1201c9e03e29af51
Compare: https://github.com/Checkmk/checkmk/compare/42a52411ba08...3170b5055606
To unsubscribe from these emails, change your notification settings at
https://github.com/Checkmk/checkmk/settings/notifications