29 May
2024
29 May
'24
8:28 a.m.
Branch: refs/heads/release/2.1.0p42
Home: https://github.com/Checkmk/checkmk
Commit: 75cd38fcab2c53f211428d6410a82aed879842ed
https://github.com/Checkmk/checkmk/commit/75cd38fcab2c53f211428d6410a82aed8…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A tests/agent-unit/test_common_plugin_parts.sh
Log Message:
-----------
Add test for common agent plugin code
Change-Id: Ibcb282c05186c80986d6eb2ad1689120cb72eeba
Commit: f9e84ecdd2a1ce5a1291a7b0542567174f48084b
https://github.com/Checkmk/checkmk/commit/f9e84ecdd2a1ce5a1291a7b0542567174…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
A tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
Generalize common agent plugin code
Pass permissions, owner and group directly and document arguments
Change-Id: I29095c316e1a4cd8bd234b65cbcfbc3867f2a693
Commit: c784608b2fa02f542fd333b3ae5adb714c3840c6
https://github.com/Checkmk/checkmk/commit/c784608b2fa02f542fd333b3ae5adb714…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16232
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/windows/plugins/mk_oracle.ps1
M tests/unit-shell/agents/plugins/test_mk_oracle.sh
Log Message:
-----------
16232 SEC mk_oracle(ps1): Prevent privilege esclation to root
Change-Id: Ia5305b388e6ca286a439a901855c3b83ffcd8d82
JIRA-Ref: CMK-15000
Commit: e1ef17440d3d049a3e151a5538d018dc0de010b0
https://github.com/Checkmk/checkmk/commit/e1ef17440d3d049a3e151a5538d018dc0…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16234
M agents/plugins/mk_oracle
Log Message:
-----------
16234 SEC Hide credentials in ps output for mk_oracle
Creds go to
https://tonyhasler.wordpress.com/2008/10/15/hiding-sqlplus-passwords-from-p…
SUP-17435
Change-Id: I0588486baa975cf6e9f1e6b1bef693518194a094
JIRA-Ref: CMK-15000
Commit: 53176011b9caff834c240a7c5e9da6abacdd14a6
https://github.com/Checkmk/checkmk/commit/53176011b9caff834c240a7c5e9da6aba…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16198
M agents/plugins/mk_informix
Log Message:
-----------
mk_informix: Do not allow privilege escalation
The informix database monitoring plugin would previously `eval` statements parsed from
`$INFORMIXDIR/bin/onstat`. Since the plugin is usually run as root, this could cause
statements injected in `$INFORMIXDIR/bin/onstat` to be run as root as well.
By adding scripts named the same as other functionality found in `$PATH` to
`$INFORMIXDIR/bin`, `$PATH` functionality could also be overshadowed and the custom
executed as root.
Finally, `$INFORMIXDIR/bin/onstat` would be executed as root, allowing a substituted
script to be run with elevated privileges.
With this werk, the environment variables will be exported instead and `$PATH` will now be
searched before `$INFORMIXDIR/bin`.
The plugin will now also check if `$INFORMIXDIR/bin/onstat` belongs to root if the plugin
is executed as root. If not, it will be executed as the user owning the executable.
Change-Id: Idfe1d31c80998c6067baa718df9fb0a5c293eb27
Commit: 06e4122a6229dffbe77b1823d71ba8730663e0db
https://github.com/Checkmk/checkmk/commit/06e4122a6229dffbe77b1823d71ba8730…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/check_mk_agent.aix
M agents/check_mk_agent.freebsd
M agents/check_mk_agent.hpux
M agents/check_mk_agent.linux
M agents/check_mk_agent.macosx
M agents/check_mk_agent.netbsd
M agents/check_mk_agent.openbsd
M agents/check_mk_agent.openvms
M agents/check_mk_agent.openwrt
M agents/check_mk_agent.solaris
M agents/cmk-agent-ctl/src/constants.rs
M agents/plugins/apache_status.py
M agents/plugins/asmcmd.sh
M agents/plugins/db2_mem
M agents/plugins/dnsclient
M agents/plugins/hpux_lunstats
M agents/plugins/hpux_statgrab
M agents/plugins/ibm_mq
M agents/plugins/isc_dhcpd.py
M agents/plugins/jar_signature
M agents/plugins/kaspersky_av
M agents/plugins/lnx_container_host_if.linux
M agents/plugins/lnx_quota
M agents/plugins/lvm
M agents/plugins/mailman_lists
M agents/plugins/mk_apt
M agents/plugins/mk_ceph
M agents/plugins/mk_cups_queues
M agents/plugins/mk_db2.aix
M agents/plugins/mk_db2.linux
M agents/plugins/mk_docker.py
M agents/plugins/mk_errpt.aix
M agents/plugins/mk_filehandler
M agents/plugins/mk_filestats.py
M agents/plugins/mk_haproxy.freebsd
M agents/plugins/mk_informix
M agents/plugins/mk_inotify.py
M agents/plugins/mk_inventory.aix
M agents/plugins/mk_inventory.linux
M agents/plugins/mk_inventory.solaris
M agents/plugins/mk_iptables
M agents/plugins/mk_jolokia.py
M agents/plugins/mk_logins
M agents/plugins/mk_logwatch.py
M agents/plugins/mk_mongodb.py
M agents/plugins/mk_mysql
M agents/plugins/mk_nfsiostat
M agents/plugins/mk_omreport
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/plugins/mk_postgres.py
M agents/plugins/mk_redis
M agents/plugins/mk_sap.aix
M agents/plugins/mk_sap.py
M agents/plugins/mk_sap_hana
M agents/plugins/mk_saprouter
M agents/plugins/mk_scaleio
M agents/plugins/mk_site_object_counts
M agents/plugins/mk_sshd_config
M agents/plugins/mk_suseconnect
M agents/plugins/mk_tinkerforge.py
M agents/plugins/mk_tsm
M agents/plugins/mk_zypper
M agents/plugins/mtr.py
M agents/plugins/netstat.aix
M agents/plugins/netstat.linux
M agents/plugins/netstat.solaris
M agents/plugins/nfsexports
M agents/plugins/nfsexports.solaris
M agents/plugins/nginx_status.py
M agents/plugins/plesk_backups.py
M agents/plugins/plesk_domains.py
M agents/plugins/runas
M agents/plugins/smart
M agents/plugins/symantec_av
M agents/plugins/unitrends_backup
M agents/plugins/unitrends_replication.py
M agents/plugins/vxvm
M agents/plugins/websphere_mq
M agents/plugins/zorp
M agents/windows/plugins/ad_replication.bat
M agents/windows/plugins/arcserve_backup.ps1
M agents/windows/plugins/citrix_farm.ps1
M agents/windows/plugins/citrix_licenses.vbs
M agents/windows/plugins/citrix_xenapp.ps1
M agents/windows/plugins/hyperv_vms.ps1
M agents/windows/plugins/hyperv_vms_guestinfos.ps1
M agents/windows/plugins/iis_app_pool_state.ps1
M agents/windows/plugins/kaspersky_av_client.vbs
M agents/windows/plugins/mcafee_av_client.bat
M agents/windows/plugins/megaraid.bat
M agents/windows/plugins/mk_dhcp_enabled.bat
M agents/windows/plugins/mk_inventory.vbs
M agents/windows/plugins/mk_msoffice.ps1
M agents/windows/plugins/mk_mysql.vbs
M agents/windows/plugins/mk_oracle.ps1
M agents/windows/plugins/msexch_dag.ps1
M agents/windows/plugins/msexch_database.ps1
M agents/windows/plugins/mssql.vbs
M agents/windows/plugins/netstat_an.bat
M agents/windows/plugins/rds_licenses.vbs
M agents/windows/plugins/rstcli.bat
M agents/windows/plugins/sansymphony.ps1
M agents/windows/plugins/storcli.bat
M agents/windows/plugins/tsm_checks.bat
M agents/windows/plugins/veeam_backup_status.ps1
M agents/windows/plugins/win_dhcp_pools.bat
M agents/windows/plugins/win_dmidecode.bat
M agents/windows/plugins/win_license.bat
M agents/windows/plugins/win_printers.ps1
M agents/windows/plugins/windows_broadcom_bonding.bat
M agents/windows/plugins/windows_if.ps1
M agents/windows/plugins/windows_intel_bonding.bat
M agents/windows/plugins/windows_multipath.vbs
M agents/windows/plugins/windows_os_bonding.ps1
M agents/windows/plugins/windows_tasks.ps1
M agents/windows/plugins/windows_updates.vbs
M agents/windows/plugins/wmic_if.bat
M agents/wnx/src/common/wnx_version.h
M bin/livedump
M bin/mkbackup
M bin/mkbench
M cmk/utils/version.py
M configure.ac
M defines.make
M docker/Dockerfile
Log Message:
-----------
Set version to 2.1.0p42
Change-Id: I3bda786ccf346c37626e9e4bf624281f6263f4fc
Commit: 98629fabd9c419dbf231fdf789da542d026d238a
https://github.com/Checkmk/checkmk/commit/98629fabd9c419dbf231fdf789da542d0…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix syntax errors on mk_oracle agent plugin
SUP-18082
Change-Id: Ica669024b54ac727161df2f1c990574797d3ab11
Commit: 2f926d1f06cee88ee59f2059c6bc67516cf3c3c3
https://github.com/Checkmk/checkmk/commit/2f926d1f06cee88ee59f2059c6bc67516…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix broken pipe
SUP-18105
Change-Id: Ief4a607c11cc8235e47512826eb1e57d7583fd66
Commit: e80760bc9ca275cf9f77a61327e7955dc15603fa
https://github.com/Checkmk/checkmk/commit/e80760bc9ca275cf9f77a61327e7955dc…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/kaspersky_av
M agents/plugins/mk_informix
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
Log Message:
-----------
extract parts of get_binary_execution_mode
this will be needed for permission checking in mk_oracle
Change-Id: I6bce1ba2abb5fe0e0588af9d25aa8ab53b0499f7
Commit: 2f929d6d07f27d94f56c61a8f1808a2d97b0f385
https://github.com/Checkmk/checkmk/commit/2f929d6d07f27d94f56c61a8f1808a2d9…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
use $GREP instead of grep
Change-Id: I442549d24e1d3b13b6393d88ef552c963b9ef602
Commit: 5d1e59c4840ce92ec680a943367279fd9bc4f592
https://github.com/Checkmk/checkmk/commit/5d1e59c4840ce92ec680a943367279fd9…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15330
M agents/plugins/mk_oracle
Log Message:
-----------
15330 FIX mk_oracle: report failed login
Due to fixes introduced with
<a href="https://checkmk.com/werk/16234">Werk #16234</a> a failed
login to the
oracle database was not reported as critical, but the services were going
stale. This is now fixed.
Change-Id: Iae9f9232b9e48d00b752987a0f2dae9a7fa91e0d
Commit: 0231fe41b833b5d0de785768a68610df5bd4d572
https://github.com/Checkmk/checkmk/commit/0231fe41b833b5d0de785768a68610df5…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
provide hints for changing permissions
Change-Id: I956b7e2f212a92db3128f3e9ed2c4a952246379a
Commit: e9bb4f361b13f05cda16a3e4720a1e44ab1c27d0
https://github.com/Checkmk/checkmk/commit/e9bb4f361b13f05cda16a3e4720a1e44a…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15327
Log Message:
-----------
15327 FIX mk_oracle: Follow-up to privilege escalation fix
Add werk for mk_oracle related changes
Change-Id: I8ca91c3d189c2b2cb997a120961dbb5428e2d25b
Commit: da5f8258d3d119e5ffe09fc3575c8515d5d12e9c
https://github.com/Checkmk/checkmk/commit/da5f8258d3d119e5ffe09fc3575c8515d…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15328
M agents/plugins/mk_oracle
Log Message:
-----------
15328 FIX mk_oracle: Follow-up to privilege escalation fix: sqlnet.ora
Change-Id: I30378fbf37c3b9735fd2bb396f376eca9e1de70c
Commit: ecb3f43e738c417089ae2b82bd9b61028a11515e
https://github.com/Checkmk/checkmk/commit/ecb3f43e738c417089ae2b82bd9b61028…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15329
M checks/oracle_processes
M checks/oracle_recovery_area
Log Message:
-----------
15329 FIX mk_oracle: fix two parse errors
refs CMK-16766
Change-Id: Ia1e9dcc1e73cd2ef0129a07a9402997786544deb
Commit: fcad455e641a66656a87c7cf95c48514cd047c95
https://github.com/Checkmk/checkmk/commit/fcad455e641a66656a87c7cf95c48514c…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
export needs_user_switch_before_executing function
Change-Id: Idd4e13c9f798ec7fab2b9fe815a58b1c19638c7d
Commit: d44b00dd42a114a7bd7e029a5f1db70fc20fd3c2
https://github.com/Checkmk/checkmk/commit/d44b00dd42a114a7bd7e029a5f1db70fc…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15843
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
15843 FIX mk_oracle(ps1): Follow-up to privilege escalation fix
Change-Id: I1d2f868b41fc6953ee6ded387deeb835eda088f6
Commit: be30a98c916326415fb4c56b69b0c2308bb7d2f6
https://github.com/Checkmk/checkmk/commit/be30a98c916326415fb4c56b69b0c2308…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M .werks/15843
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
oracle: fix mk_oracle.ps1 and werk
Change-Id: Ica1fb33144cd3f7f437d6f1d5420939c1d391b84
Commit: 42a52411ba088bdf2c369e5c042fc31a6ee75808
https://github.com/Checkmk/checkmk/commit/42a52411ba088bdf2c369e5c042fc31a6…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M Pipfile
M Pipfile.lock
R omd/packages/python3-modules/github-com.pem
M omd/packages/python3-modules/python3-modules.make
Log Message:
-----------
Update pymssql
... and remove building from github
Change-Id: Iae02683fe176a02c2e1c5d7b1201c9e03e29af51
Compare: https://github.com/Checkmk/checkmk/compare/9eaa24d881e4...42a52411ba08
To unsubscribe from these emails, change your notification settings at
https://github.com/Checkmk/checkmk/settings/notifications