28 May
2024
28 May
'24
10:56 a.m.
Branch: refs/heads/release/2.2.0p25
Home: https://github.com/Checkmk/checkmk
Commit: 064f76d84454bda5564e4423fd1b2610be973295
https://github.com/Checkmk/checkmk/commit/064f76d84454bda5564e4423fd1b2610b…
Author: Sofia Colakovic <sofia.colakovic(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16172
M agents/plugins/kaspersky_av
A tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
16172 SEC kaspersky_av: Don't run kav4fs-control or kesl-control if they aren't
owned by root
Kaspersky Anti-Virus plugin uses /opt/kaspersky/kav4fs/bin/kav4fs-control and
/opt/kaspersky/kesl/bin/kesl-control commands to monitor a Kaspersky Anti-Virus
installation.
To prevent privilege escalation, the plugin (which is run by root user) must
not run executables which can be changed by less privileged users.
In the default installation, kav4fs-control and kesl-control commands are owned
by root and root is the only user with write permissions, which prevents privilege
escalation attacks.
With this Werk, the plugin checks if control commands are owned by root and root
is the only user with write permissions before running the command. If that's not
the case the commands won't be run. This prevents privilege escalation attacks if
the permissions of the control commands have been changed.
CMK-15318
Change-Id: Ie5de60541dbd76a983c9918ccf48a73ed1ee26f7
Commit: 01c6bd6cfaa17993d8d915191f23f30382da92f6
https://github.com/Checkmk/checkmk/commit/01c6bd6cfaa17993d8d915191f23f3038…
Author: Sofia Colakovic <sofia.colakovic(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16173
M agents/plugins/symantec_av
A tests/unit-shell/agents/plugins/test_symantec_av.sh
Log Message:
-----------
16173 SEC symantec_av: Don't run sav command if it isn't owned by root
Symantec Anti Virus plugin uses /opt/Symantec/symantec_antivirus/sav command
to monitor a Symantec Anti Virus installation.
To prevent privilege escalation, the plugin (which is run by root user) must
not run executables which can be changed by less privileged users.
In the default installation, sav command is owned by root and root is the only
user with write permissions, which prevents privilege escalation attacks.
With this Werk, the plugin checks if sav command is owned by root and root
is the only user with write permissions before running the command. If that's not
the case the command won't be run. This prevents privilege escalation attacks if
the permissions of the sav command have been changed.
We rate this with a CVSS of 0 (None) (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N).
This CVSS is primarily meant to please automatic scanners.
CMK-15318
Change-Id: I677d94136bd21cd54461f6e125764754208d99af
Commit: 4587700228046bf9eb2f3b2f76700a35edb899fc
https://github.com/Checkmk/checkmk/commit/4587700228046bf9eb2f3b2f76700a35e…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
A tests/unit-shell/agents/plugins/test_common_plugin_parts.sh
Log Message:
-----------
Add test for common agent plugin code
Change-Id: Ibcb282c05186c80986d6eb2ad1689120cb72eeba
(cherry picked from commit db65b8ca49e1d63b78fd1afb156fa0348b6d1675)
Commit: 13f3420154ba7385f36228cf54d4b516219bfcb2
https://github.com/Checkmk/checkmk/commit/13f3420154ba7385f36228cf54d4b5162…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
M tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
Generalize common agent plugin code root_owned()
Pass permissions, owner and group directly and document arguments
Change-Id: I29095c316e1a4cd8bd234b65cbcfbc3867f2a693
Commit: 7f60d5ca43618a5052d171fc2310a50ba7a94a5f
https://github.com/Checkmk/checkmk/commit/7f60d5ca43618a5052d171fc2310a50ba…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16232
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/windows/plugins/mk_oracle.ps1
M tests/unit-shell/agents/plugins/test_mk_oracle.sh
Log Message:
-----------
16232 SEC mk_oracle(ps1): Prevent privilege esclation to root
Change-Id: Ia5305b388e6ca286a439a901855c3b83ffcd8d82
JIRA-Ref: CMK-15000
Commit: 90a2d1102334cea8851e769d6117661f84b9a507
https://github.com/Checkmk/checkmk/commit/90a2d1102334cea8851e769d6117661f8…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16234
M agents/plugins/mk_oracle
Log Message:
-----------
16234 SEC Hide credentials in ps output for mk_oracle
Creds go to
https://tonyhasler.wordpress.com/2008/10/15/hiding-sqlplus-passwords-from-p…
SUP-17435
Change-Id: I0588486baa975cf6e9f1e6b1bef693518194a094
JIRA-Ref: CMK-15000
Commit: 4bd7d5c2fa406f81e3798e9bd2774a8cba181fda
https://github.com/Checkmk/checkmk/commit/4bd7d5c2fa406f81e3798e9bd2774a8cb…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16198
M agents/plugins/mk_informix
Log Message:
-----------
mk_informix: Do not allow privilege escalation
The informix database monitoring plugin would previously `eval` statements parsed from
`$INFORMIXDIR/bin/onstat`. Since the plugin is usually run as root, this could cause
statements injected in `$INFORMIXDIR/bin/onstat` to be run as root as well.
By adding scripts named the same as other functionality found in `$PATH` to
`$INFORMIXDIR/bin`, `$PATH` functionality could also be overshadowed and the custom
executed as root.
Finally, `$INFORMIXDIR/bin/onstat` would be executed as root, allowing a substituted
script to be run with elevated privileges.
With this werk, the environment variables will be exported instead and `$PATH` will now be
searched before `$INFORMIXDIR/bin`.
The plugin will now also check if `$INFORMIXDIR/bin/onstat` belongs to root if the plugin
is executed as root. If not, it will be executed as the user owning the executable.
Change-Id: Idfe1d31c80998c6067baa718df9fb0a5c293eb27
JIRA-Ref: CMK-15000
Commit: ddd2652f952680baea0655064d05aa22bc599521
https://github.com/Checkmk/checkmk/commit/ddd2652f952680baea0655064d05aa22b…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/check_mk_agent.aix
M agents/check_mk_agent.freebsd
M agents/check_mk_agent.hpux
M agents/check_mk_agent.linux
M agents/check_mk_agent.macosx
M agents/check_mk_agent.netbsd
M agents/check_mk_agent.openbsd
M agents/check_mk_agent.openvms
M agents/check_mk_agent.openwrt
M agents/check_mk_agent.solaris
M agents/plugins/apache_status.py
M agents/plugins/asmcmd.sh
M agents/plugins/db2_mem
M agents/plugins/dnsclient
M agents/plugins/hpux_lunstats
M agents/plugins/hpux_statgrab
M agents/plugins/ibm_mq
M agents/plugins/isc_dhcpd.py
M agents/plugins/jar_signature
M agents/plugins/kaspersky_av
M agents/plugins/lnx_container_host_if.linux
M agents/plugins/lnx_quota
M agents/plugins/lvm
M agents/plugins/mailman2_lists
M agents/plugins/mailman3_lists
M agents/plugins/mk_apt
M agents/plugins/mk_ceph
M agents/plugins/mk_cups_queues
M agents/plugins/mk_db2.aix
M agents/plugins/mk_db2.linux
M agents/plugins/mk_docker.py
M agents/plugins/mk_errpt.aix
M agents/plugins/mk_filehandler
M agents/plugins/mk_filestats.py
M agents/plugins/mk_haproxy.freebsd
M agents/plugins/mk_informix
M agents/plugins/mk_inotify.py
M agents/plugins/mk_inventory.aix
M agents/plugins/mk_inventory.linux
M agents/plugins/mk_inventory.solaris
M agents/plugins/mk_iptables
M agents/plugins/mk_jolokia.py
M agents/plugins/mk_logins
M agents/plugins/mk_logwatch.py
M agents/plugins/mk_mongodb.py
M agents/plugins/mk_mysql
M agents/plugins/mk_nfsiostat
M agents/plugins/mk_omreport
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/plugins/mk_postgres.py
M agents/plugins/mk_redis
M agents/plugins/mk_sap.aix
M agents/plugins/mk_sap.py
M agents/plugins/mk_sap_hana
M agents/plugins/mk_saprouter
M agents/plugins/mk_scaleio
M agents/plugins/mk_site_object_counts
M agents/plugins/mk_sshd_config
M agents/plugins/mk_suseconnect
M agents/plugins/mk_tinkerforge.py
M agents/plugins/mk_tsm
M agents/plugins/mk_zypper
M agents/plugins/mtr.py
M agents/plugins/netstat.aix
M agents/plugins/netstat.linux
M agents/plugins/netstat.solaris
M agents/plugins/nfsexports
M agents/plugins/nfsexports.solaris
M agents/plugins/nginx_status.py
M agents/plugins/plesk_backups.py
M agents/plugins/plesk_domains.py
M agents/plugins/runas
M agents/plugins/smart
M agents/plugins/symantec_av
M agents/plugins/unitrends_backup
M agents/plugins/unitrends_replication.py
M agents/plugins/vxvm
M agents/plugins/websphere_mq
M agents/plugins/zorp
M agents/windows/plugins/ad_replication.bat
M agents/windows/plugins/arcserve_backup.ps1
M agents/windows/plugins/citrix_farm.ps1
M agents/windows/plugins/citrix_licenses.vbs
M agents/windows/plugins/citrix_xenapp.ps1
M agents/windows/plugins/hyperv_vms.ps1
M agents/windows/plugins/hyperv_vms_guestinfos.ps1
M agents/windows/plugins/iis_app_pool_state.ps1
M agents/windows/plugins/kaspersky_av_client.vbs
M agents/windows/plugins/mcafee_av_client.bat
M agents/windows/plugins/megaraid.bat
M agents/windows/plugins/mk_dhcp_enabled.bat
M agents/windows/plugins/mk_inventory.vbs
M agents/windows/plugins/mk_msoffice.ps1
M agents/windows/plugins/mk_mysql.vbs
M agents/windows/plugins/mk_oracle.ps1
M agents/windows/plugins/msexch_dag.ps1
M agents/windows/plugins/msexch_database.ps1
M agents/windows/plugins/mssql.vbs
M agents/windows/plugins/netstat_an.bat
M agents/windows/plugins/nvidia_smi.ps1
M agents/windows/plugins/rds_licenses.vbs
M agents/windows/plugins/rstcli.bat
M agents/windows/plugins/sansymphony.ps1
M agents/windows/plugins/storcli.bat
M agents/windows/plugins/tsm_checks.bat
M agents/windows/plugins/veeam_backup_status.ps1
M agents/windows/plugins/win_dhcp_pools.bat
M agents/windows/plugins/win_dmidecode.bat
M agents/windows/plugins/win_license.bat
M agents/windows/plugins/win_printers.ps1
M agents/windows/plugins/windows_broadcom_bonding.bat
M agents/windows/plugins/windows_if.ps1
M agents/windows/plugins/windows_intel_bonding.bat
M agents/windows/plugins/windows_multipath.vbs
M agents/windows/plugins/windows_os_bonding.ps1
M agents/windows/plugins/windows_tasks.ps1
M agents/windows/plugins/windows_updates.vbs
M agents/windows/plugins/wmic_if.bat
M agents/wnx/src/common/wnx_version.h
M bin/livedump
M bin/mkbackup
M cmk/special_agents/agent_jolokia.py
M cmk/special_agents/agent_netapp.py
M cmk/special_agents/agent_splunk.py
M cmk/special_agents/agent_vsphere.py
M cmk/utils/version.py
M configure.ac
M defines.make
M docker_image/Dockerfile
M packages/cmk-agent-ctl/src/constants.rs
Log Message:
-----------
Set version to 2.2.0p25
Change-Id: I511a4ab28bc793d71fdf7b4ec7db56ae24efbe60
Commit: d1f90d6ad610577948bf73ed786a69b24273811b
https://github.com/Checkmk/checkmk/commit/d1f90d6ad610577948bf73ed786a69b24…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
fix Oracle plugin for Windows
If run as admin and executable is NOT protected from non-admin write access then
1. write error:
XE|FAILURE|Safe execution is not possible: THE-HOST\THE-USER
has 'Write' access to 'c:\path\to\oracle\home\bin\sqlplus.exe'.
Either run the plugin as a user using the rule 'Run plugins and local checks
using non-system account' or disable 'Write', 'Modify' and 'Full
control'
access to the by non-admin users.
2. continue to next instance
otherwise normal execution
TEST: Local manual using installed Windows agent and installed Oracle Express.
1. a user has write access: error similar to above mentioned
2. a user has no write access: no errors
Change-Id: I024ad7e2f4b7375624bc4c9175ad2ea4026a8835
Commit: eb39476e3746406fe1e9c6f4a5ccb8214c7ffd08
https://github.com/Checkmk/checkmk/commit/eb39476e3746406fe1e9c6f4a5ccb8214…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
fix and polish oracle powershell script
Now admin is correctly and consistently determined.
Change-Id: Iaae439d63afa9e58f3387d5ede3a31b0de2d7a93
Commit: 334a81e5ffeddebf22f83754f8b334eec14b5af4
https://github.com/Checkmk/checkmk/commit/334a81e5ffeddebf22f83754f8b334eec…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
rebase correct fixes on correct code from the past
Based on mk_oracle.ps1 from 11c28303
Changes:
- skip ALL changes from the `16232 SEC mk_oracle(ps1)`:
SEC CL breaks async monitoring too
- If run as admin and executable is NOT protected from non-admin write access then
1. write error:
XE|FAILURE|Safe execution is not possible: THE-HOST\THE-USER
has 'Write' access to 'c:\path\to\oracle\home\bin\sqlplus.exe'.
Either run the plugin as a user using the rule 'Run plugins and local checks
using non-system account' or disable 'Write', 'Modify' and
'Full control'
access to the by non-admin users.
2. continue to next instance
else
normal execution
- add possibility to silent log in file - internal tools
- use global temp for non-admin mode
Tests. Manual
Change-Id: I60685c102c40f979b3941f7a6af1a21d9852ae52
Commit: 0af0dc59e8c96f390b928c8de51470cdc0b90478
https://github.com/Checkmk/checkmk/commit/0af0dc59e8c96f390b928c8de51470cdc…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
fix user message in mk_oracle.ps1
Change-Id: Iab44faae665b02db63bfdd204d59aa0ff9d6ec94
Commit: 32e5dd9e649fc1ccdd87b3a8d42a6a35f50efca7
https://github.com/Checkmk/checkmk/commit/32e5dd9e649fc1ccdd87b3a8d42a6a35f…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
use SID instead of names in mk_oracle.ps1
Change-Id: Ia2503e3f60ee44098bb4ef9d5d26ddc49fa7d354
Commit: 3d9fb0ec1599e1700b8c7e0068f90cf27bacd34f
https://github.com/Checkmk/checkmk/commit/3d9fb0ec1599e1700b8c7e0068f90cf27…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: assume 'Domain Admins' and 'Enterprise Admins' are safe
Change-Id: I7efd9e4bddbdf4fc137518191a7f381ca6bbab23
Commit: ee4bb4db38b760c6706fc13a45be8504c8df49ae
https://github.com/Checkmk/checkmk/commit/ee4bb4db38b760c6706fc13a45be8504c…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: use sid instead of name
Change-Id: Ia57a97eb85ec889b9fa71f1fea4d123228e9b71f
Commit: 513b3b3bf6d4fc96322a4df1b957a404da2e97ca
https://github.com/Checkmk/checkmk/commit/513b3b3bf6d4fc96322a4df1b957a404d…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: extend checking permissions on tnsping and crsctl
- also tolerant if file missing
Change-Id: I47f755c5c8ec1d87b733d3014ed5f6550aae8857
Commit: 4e5c35ce497761d9f1623c1ced98458727720379
https://github.com/Checkmk/checkmk/commit/4e5c35ce497761d9f1623c1ced9845872…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15843
Log Message:
-----------
15843 FIX mk_oracle(ps1): Follow-up to privilege escalation fix
Change-Id: I1d2f868b41fc6953ee6ded387deeb835eda088f6
Commit: 7e22aff6ab35f0d988fa85b1032863e0056e54c3
https://github.com/Checkmk/checkmk/commit/7e22aff6ab35f0d988fa85b1032863e00…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/wnx/src/common/wtools.cpp
M agents/wnx/src/engine/stdafx_defines.h
M agents/wnx/src/main/pch.h
M agents/wnx/watest/test-wtools_runas.cpp
Log Message:
-----------
wa: rewrite group user test in RunAs
needed by Oracle upcoming changes
Change-Id: Ic40aab9166f597a034a8478158dc1465b26f1940
Commit: fa7e769f82995de525512590b956b55d15518aca
https://github.com/Checkmk/checkmk/commit/fa7e769f82995de525512590b956b55d1…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: add possibility to skip oracle permission check
Change-Id: I090e1d432df2a8258dcefded532109568e70ec4d
Commit: 67927112b76e22c4112610db16dbc0ec62bd8cd8
https://github.com/Checkmk/checkmk/commit/67927112b76e22c4112610db16dbc0ec6…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: change error message
Change-Id: Ic19b42d95fbd44ca17b0339620ae01bf76227cdb
Commit: b1dfa9d3dde572dc9c9889d2b2702a6d4a2a7597
https://github.com/Checkmk/checkmk/commit/b1dfa9d3dde572dc9c9889d2b2702a6d4…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: add `safe list of regexs entries`
Can be used to skip permission security check for
some users or groups specified with a list of regex
Change-Id: Ia3361140f5d72e45ffe32cd717381f4a2a469439
Commit: 698f00bf2d63a06d3bf2c0cd30dffccb458cb898
https://github.com/Checkmk/checkmk/commit/698f00bf2d63a06d3bf2c0cd30dffccb4…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: fix regex check
Change-Id: Ia85b8cf25b565e52a04ab7fef949552ac71fe2d2
Commit: 9cb3a0eb6e50b8361cf592c42cf3e937cd4a9a52
https://github.com/Checkmk/checkmk/commit/9cb3a0eb6e50b8361cf592c42cf3e937c…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: remove regex check
- according to discussion with LM and HR.
- added mention about Oracle permission check in error message
Change-Id: If9ad546f4e1fe30668a1b2f12185875e55a25248
Commit: af9ebcfde09852a8be0b875074f027dbe0cf72e4
https://github.com/Checkmk/checkmk/commit/af9ebcfde09852a8be0b875074f027dbe…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: typo
Change-Id: Id3a5d73d036b953f01b96a14f721e40c49102f16
Commit: bc306b4536ac08684db198f9fab911a6d0973a85
https://github.com/Checkmk/checkmk/commit/bc306b4536ac08684db198f9fab911a6d…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M .werks/15843
Log Message:
-----------
oracle: fix Windows werk text according current status
Change-Id: Id06b317aca90f1bcb127ac69f443b906db1edb1f
Commit: 843246933209ea25e498d331329717f07a885660
https://github.com/Checkmk/checkmk/commit/843246933209ea25e498d331329717f07…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: add minor fixes
Name of check is fixed, must be in full sync with WATO:
This is not perfect solution, we will fix it 2.3
Some comments added to make logic more clear.
Change-Id: I4e86dbed2616000fc4e9c35c079d82f4a9bddffa
Commit: 9cdf8f361a8c44b5ae42fa054e1428055d4f9b74
https://github.com/Checkmk/checkmk/commit/9cdf8f361a8c44b5ae42fa054e1428055…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/wnx/src/common/wtools.cpp
Log Message:
-----------
wa: set max length of the user name to 20
Some Windows in some cases may support only
very short name
Change-Id: I71360694c1c729723ba5420470b87d02078a3026
Commit: 0f6b62d1f590c152a2830dd8f1fe34968da06d52
https://github.com/Checkmk/checkmk/commit/0f6b62d1f590c152a2830dd8f1fe34968…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/wnx/src/common/wtools.cpp
Log Message:
-----------
wa: replace space with underscore in user names
Change-Id: I076298da6a4cee7b796400dff9bfd35d1d49993a
Commit: 13eff36cf05dd3b8c4fda2d31f500baf793555c7
https://github.com/Checkmk/checkmk/commit/13eff36cf05dd3b8c4fda2d31f500baf7…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix syntax errors on mk_oracle agent plugin
SUP-18082
Change-Id: Ica669024b54ac727161df2f1c990574797d3ab11
Commit: e53633326c46cc5585357dfe25ee05989f731b01
https://github.com/Checkmk/checkmk/commit/e53633326c46cc5585357dfe25ee05989…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix broken pipe
SUP-18105
Change-Id: Ief4a607c11cc8235e47512826eb1e57d7583fd66
Commit: f23af61a5f021eb6cef540ee5e8da50820188832
https://github.com/Checkmk/checkmk/commit/f23af61a5f021eb6cef540ee5e8da5082…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/kaspersky_av
M agents/plugins/mk_informix
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
Log Message:
-----------
extract parts of get_binary_execution_mode
this will be needed for permission checking in mk_oracle
Change-Id: I6bce1ba2abb5fe0e0588af9d25aa8ab53b0499f7
Commit: 4ce16c46fb2c5e64e6bd93b96ae548311c9851e5
https://github.com/Checkmk/checkmk/commit/4ce16c46fb2c5e64e6bd93b96ae548311…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
use $GREP instead of grep
Change-Id: I442549d24e1d3b13b6393d88ef552c963b9ef602
Commit: ea4965ecfd2856e53f0514db0e2ba71ea810b55a
https://github.com/Checkmk/checkmk/commit/ea4965ecfd2856e53f0514db0e2ba71ea…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15330
M agents/plugins/mk_oracle
Log Message:
-----------
15330 FIX mk_oracle: report failed login
Due to fixes introduced with
<a href="https://checkmk.com/werk/16234">Werk #16234</a> a failed
login to the
oracle database was not reported as critical, but the services were going
stale. This is now fixed.
Change-Id: Iae9f9232b9e48d00b752987a0f2dae9a7fa91e0d
Commit: ac97382610faf8784bca7fabdca0f2e1f744244d
https://github.com/Checkmk/checkmk/commit/ac97382610faf8784bca7fabdca0f2e1f…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
provide hints for changing permissions
Change-Id: I956b7e2f212a92db3128f3e9ed2c4a952246379a
Commit: 913aa2fe62784fe0e9eb00bf47b1ee94e83dd9fa
https://github.com/Checkmk/checkmk/commit/913aa2fe62784fe0e9eb00bf47b1ee94e…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15327
Log Message:
-----------
15327 FIX mk_oracle: Follow-up to privilege escalation fix
Add werk for mk_oracle related changes
Change-Id: I8ca91c3d189c2b2cb997a120961dbb5428e2d25b
Commit: 8a601cfbd0a870328b7440abc6702343586c1aee
https://github.com/Checkmk/checkmk/commit/8a601cfbd0a870328b7440abc67023435…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15328
M agents/plugins/mk_oracle
Log Message:
-----------
15328 FIX mk_oracle: Follow-up to privilege escalation fix: sqlnet.ora
Change-Id: I30378fbf37c3b9735fd2bb396f376eca9e1de70c
Commit: 03bad4cfdf6820e687bff7a806b3a9ee0bd38d1d
https://github.com/Checkmk/checkmk/commit/03bad4cfdf6820e687bff7a806b3a9ee0…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15329
M checks/oracle_recovery_area
M cmk/base/plugins/agent_based/oracle_processes.py
Log Message:
-----------
15329 FIX mk_oracle: fix two parse errors
refs CMK-16766
Change-Id: Ia1e9dcc1e73cd2ef0129a07a9402997786544deb
Commit: 4bbe38caa1d8e7345f75b30470b71331174b1f01
https://github.com/Checkmk/checkmk/commit/4bbe38caa1d8e7345f75b30470b713311…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: ignore deleted accounts in safety check
added check for null value: discovered by JPH only machine
Change-Id: Id1e119dccffaae6bec9013ca17f4aee4373d6847
Commit: bd344bfd10deb610a6e5d575c87910e7f7a3564d
https://github.com/Checkmk/checkmk/commit/bd344bfd10deb610a6e5d575c87910e7f…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
export needs_user_switch_before_executing function
Change-Id: Idd4e13c9f798ec7fab2b9fe815a58b1c19638c7d
Commit: 9c338a65a6db8d5ced7ac45c946d03aa8970c268
https://github.com/Checkmk/checkmk/commit/9c338a65a6db8d5ced7ac45c946d03aa8…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-19 (Fri, 19 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: fix message
Change-Id: I7bd2951bb1fef350afddc78d985f1de1fd4cd3ab
Compare: https://github.com/Checkmk/checkmk/compare/65236b565e0f...9c338a65a6db
To unsubscribe from these emails, change your notification settings at
https://github.com/Checkmk/checkmk/settings/notifications