21 Mar
2023
21 Mar
'23
7:02 p.m.
Branch: refs/heads/2.1.0
Home: https://github.com/tribe29/checkmk
Commit: 08457b2b83b8422f7f282fd29d81f9999753d954
https://github.com/tribe29/checkmk/commit/08457b2b83b8422f7f282fd29d81f9999…
Author: Andi Umbreit <andreas.umbreit(a)tribe29.com>
Date: 2023-03-21 (Tue, 21 Mar 2023)
Changed paths:
A .werks/15419
M agents/wnx/src/engine/cma_core.cpp
Log Message:
-----------
15419 FIX Windows agent: Run plugins/local checks using non-system account
This Werk addresses a regression that appeared with Werk #14871, which introduced stricter
access rights for the Windows agent's ProgramData directory.
Windows agent plugins and local checks can be configured to run under a specific user or
group, either by configuring the agent ruleset
<i>Run plugins and local checks using non-system account</i> or by editing the
<tt>check_mk.user.yaml</tt> file appropriately.
Starting with Checkmk 2.1.0p15/the abovementioned Werk, plugins and local checks that are
configured to run under a specific user failed to execute.<br>
The reason for this behavior was that, due to a preexisting bug, the Windows agent service
then failed to set the proper access rights on the underlying files.<br>
With the stricter default access rights, the files were not accessible any longer.
This only affected plugins/local checks that are configured with the option <i>Run
as User</i>, while the ones configured with <i>Run as local group</i>
did succeed.
The abovementioned bug is now fixed, and plugins/local checks will resume to work as
configured.
To apply this fix, you need to update/reinstall the Windows Agent once.
CMK-11844
Change-Id: Ife0691378c35cb93af13864a6516179c19a4602b