[checkmk-commits] [Checkmk/checkmk] e5239d: Add test for common agent plugin code

Branch: refs/heads/2.1.0 Home: https://github.com/Checkmk/checkmk Commit: e5239d0156c4154416964df109fde4f40a33632c https://github.com/Checkmk/checkmk/commit/e5239d0156c4154416964df109fde4f40… Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com> Date: 2024-03-19 (Tue, 19 Mar 2024) Changed paths: A tests/agent-unit/test_common_plugin_parts.sh Log Message: ----------- Add test for common agent plugin code Change-Id: Ibcb282c05186c80986d6eb2ad1689120cb72eeba Commit: 65a474b80aea6ccbe1194a3f09e4461b1ab762c8 https://github.com/Checkmk/checkmk/commit/65a474b80aea6ccbe1194a3f09e4461b1… Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com> Date: 2024-03-19 (Tue, 19 Mar 2024) Changed paths: M agents/plugins/kaspersky_av A tests/unit-shell/agents/plugins/test_kaspersky_av.sh Log Message: ----------- Generalize common agent plugin code Pass permissions, owner and group directly and document arguments Change-Id: I29095c316e1a4cd8bd234b65cbcfbc3867f2a693 Commit: 58d055b07b02dac0078c398b36ba354a2475ba43 https://github.com/Checkmk/checkmk/commit/58d055b07b02dac0078c398b36ba354a2… Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com> Date: 2024-03-19 (Tue, 19 Mar 2024) Changed paths: A .werks/16232 M agents/plugins/mk_oracle M agents/plugins/mk_oracle_crs M agents/windows/plugins/mk_oracle.ps1 M tests/unit-shell/agents/plugins/test_mk_oracle.sh Log Message: ----------- 16232 SEC mk_oracle(ps1): Prevent privilege esclation to root Change-Id: Ia5305b388e6ca286a439a901855c3b83ffcd8d82 JIRA-Ref: CMK-15000 Commit: f65e71ec5fdbc7e73fa0fbf7519d4aad21a1059a https://github.com/Checkmk/checkmk/commit/f65e71ec5fdbc7e73fa0fbf7519d4aad2… Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com> Date: 2024-03-19 (Tue, 19 Mar 2024) Changed paths: A .werks/16234 M agents/plugins/mk_oracle Log Message: ----------- 16234 SEC Hide credentials in ps output for mk_oracle Creds go to https://tonyhasler.wordpress.com/2008/10/15/hiding-sqlplus-passwords-from-p… SUP-17435 Change-Id: I0588486baa975cf6e9f1e6b1bef693518194a094 JIRA-Ref: CMK-15000 Commit: 0073b54d3ba64946515275a4adc6afe86c79b34c https://github.com/Checkmk/checkmk/commit/0073b54d3ba64946515275a4adc6afe86… Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com> Date: 2024-03-19 (Tue, 19 Mar 2024) Changed paths: A .werks/16198 M agents/plugins/mk_informix Log Message: ----------- mk_informix: Do not allow privilege escalation The informix database monitoring plugin would previously `eval` statements parsed from `$INFORMIXDIR/bin/onstat`. Since the plugin is usually run as root, this could cause statements injected in `$INFORMIXDIR/bin/onstat` to be run as root as well. By adding scripts named the same as other functionality found in `$PATH` to `$INFORMIXDIR/bin`, `$PATH` functionality could also be overshadowed and the custom executed as root. Finally, `$INFORMIXDIR/bin/onstat` would be executed as root, allowing a substituted script to be run with elevated privileges. With this werk, the environment variables will be exported instead and `$PATH` will now be searched before `$INFORMIXDIR/bin`. The plugin will now also check if `$INFORMIXDIR/bin/onstat` belongs to root if the plugin is executed as root. If not, it will be executed as the user owning the executable. Change-Id: Idfe1d31c80998c6067baa718df9fb0a5c293eb27 Commit: b88683c8930da546fe948fdb8efa00c6cc7b9706 https://github.com/Checkmk/checkmk/commit/b88683c8930da546fe948fdb8efa00c6c… Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com> Date: 2024-03-20 (Wed, 20 Mar 2024) Changed paths: M .werks/16234 Log Message: ----------- Fixup werk Change-Id: Ib68caa779b876a7766bd8261aed5a38d0b159cdd Commit: c4d72c813560da67fed3a320e864ed6a36978e6b https://github.com/Checkmk/checkmk/commit/c4d72c813560da67fed3a320e864ed6a3… Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com> Date: 2024-03-20 (Wed, 20 Mar 2024) Changed paths: M agents/check_mk_agent.aix M agents/check_mk_agent.freebsd M agents/check_mk_agent.hpux M agents/check_mk_agent.linux M agents/check_mk_agent.macosx M agents/check_mk_agent.netbsd M agents/check_mk_agent.openbsd M agents/check_mk_agent.openvms M agents/check_mk_agent.openwrt M agents/check_mk_agent.solaris M agents/cmk-agent-ctl/src/constants.rs M agents/plugins/apache_status.py M agents/plugins/asmcmd.sh M agents/plugins/db2_mem M agents/plugins/dnsclient M agents/plugins/hpux_lunstats M agents/plugins/hpux_statgrab M agents/plugins/ibm_mq M agents/plugins/isc_dhcpd.py M agents/plugins/jar_signature M agents/plugins/kaspersky_av M agents/plugins/lnx_container_host_if.linux M agents/plugins/lnx_quota M agents/plugins/lvm M agents/plugins/mailman_lists M agents/plugins/mk_apt M agents/plugins/mk_ceph M agents/plugins/mk_cups_queues M agents/plugins/mk_db2.aix M agents/plugins/mk_db2.linux M agents/plugins/mk_docker.py M agents/plugins/mk_errpt.aix M agents/plugins/mk_filehandler M agents/plugins/mk_filestats.py M agents/plugins/mk_haproxy.freebsd M agents/plugins/mk_informix M agents/plugins/mk_inotify.py M agents/plugins/mk_inventory.aix M agents/plugins/mk_inventory.linux M agents/plugins/mk_inventory.solaris M agents/plugins/mk_iptables M agents/plugins/mk_jolokia.py M agents/plugins/mk_logins M agents/plugins/mk_logwatch.py M agents/plugins/mk_mongodb.py M agents/plugins/mk_mysql M agents/plugins/mk_nfsiostat M agents/plugins/mk_omreport M agents/plugins/mk_oracle M agents/plugins/mk_oracle_crs M agents/plugins/mk_postgres.py M agents/plugins/mk_redis M agents/plugins/mk_sap.aix M agents/plugins/mk_sap.py M agents/plugins/mk_sap_hana M agents/plugins/mk_saprouter M agents/plugins/mk_scaleio M agents/plugins/mk_site_object_counts M agents/plugins/mk_sshd_config M agents/plugins/mk_suseconnect M agents/plugins/mk_tinkerforge.py M agents/plugins/mk_tsm M agents/plugins/mk_zypper M agents/plugins/mtr.py M agents/plugins/netstat.aix M agents/plugins/netstat.linux M agents/plugins/netstat.solaris M agents/plugins/nfsexports M agents/plugins/nfsexports.solaris M agents/plugins/nginx_status.py M agents/plugins/plesk_backups.py M agents/plugins/plesk_domains.py M agents/plugins/runas M agents/plugins/smart M agents/plugins/symantec_av M agents/plugins/unitrends_backup M agents/plugins/unitrends_replication.py M agents/plugins/vxvm M agents/plugins/websphere_mq M agents/plugins/zorp M agents/windows/plugins/ad_replication.bat M agents/windows/plugins/arcserve_backup.ps1 M agents/windows/plugins/citrix_farm.ps1 M agents/windows/plugins/citrix_licenses.vbs M agents/windows/plugins/citrix_xenapp.ps1 M agents/windows/plugins/hyperv_vms.ps1 M agents/windows/plugins/hyperv_vms_guestinfos.ps1 M agents/windows/plugins/iis_app_pool_state.ps1 M agents/windows/plugins/kaspersky_av_client.vbs M agents/windows/plugins/mcafee_av_client.bat M agents/windows/plugins/megaraid.bat M agents/windows/plugins/mk_dhcp_enabled.bat M agents/windows/plugins/mk_inventory.vbs M agents/windows/plugins/mk_msoffice.ps1 M agents/windows/plugins/mk_mysql.vbs M agents/windows/plugins/mk_oracle.ps1 M agents/windows/plugins/msexch_dag.ps1 M agents/windows/plugins/msexch_database.ps1 M agents/windows/plugins/mssql.vbs M agents/windows/plugins/netstat_an.bat M agents/windows/plugins/rds_licenses.vbs M agents/windows/plugins/rstcli.bat M agents/windows/plugins/sansymphony.ps1 M agents/windows/plugins/storcli.bat M agents/windows/plugins/tsm_checks.bat M agents/windows/plugins/veeam_backup_status.ps1 M agents/windows/plugins/win_dhcp_pools.bat M agents/windows/plugins/win_dmidecode.bat M agents/windows/plugins/win_license.bat M agents/windows/plugins/win_printers.ps1 M agents/windows/plugins/windows_broadcom_bonding.bat M agents/windows/plugins/windows_if.ps1 M agents/windows/plugins/windows_intel_bonding.bat M agents/windows/plugins/windows_multipath.vbs M agents/windows/plugins/windows_os_bonding.ps1 M agents/windows/plugins/windows_tasks.ps1 M agents/windows/plugins/windows_updates.vbs M agents/windows/plugins/wmic_if.bat M agents/wnx/src/common/wnx_version.h M bin/livedump M bin/mkbackup M bin/mkbench M cmk/utils/version.py M configure.ac M defines.make M docker/Dockerfile Log Message: ----------- Set version to 2.1.0p42 Change-Id: I15462bb13de94d8d99d795afeea4a097ea9baba6 Compare: https://github.com/Checkmk/checkmk/compare/7939e5ff4977...c4d72c813560 To unsubscribe from these emails, change your notification settings at https://github.com/Checkmk/checkmk/settings/notifications