29 May
2024
29 May
'24
8:28 a.m.
Branch: refs/heads/release/2.2.0p25
Home: https://github.com/Checkmk/checkmk
Commit: 0683570eb971fe9396633ce884e9b5458ef8ddfa
https://github.com/Checkmk/checkmk/commit/0683570eb971fe9396633ce884e9b5458…
Author: Sofia Colakovic <sofia.colakovic(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16172
M agents/plugins/kaspersky_av
A tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
16172 SEC kaspersky_av: Don't run kav4fs-control or kesl-control if they aren't
owned by root
Kaspersky Anti-Virus plugin uses /opt/kaspersky/kav4fs/bin/kav4fs-control and
/opt/kaspersky/kesl/bin/kesl-control commands to monitor a Kaspersky Anti-Virus
installation.
To prevent privilege escalation, the plugin (which is run by root user) must
not run executables which can be changed by less privileged users.
In the default installation, kav4fs-control and kesl-control commands are owned
by root and root is the only user with write permissions, which prevents privilege
escalation attacks.
With this Werk, the plugin checks if control commands are owned by root and root
is the only user with write permissions before running the command. If that's not
the case the commands won't be run. This prevents privilege escalation attacks if
the permissions of the control commands have been changed.
CMK-15318
Change-Id: Ie5de60541dbd76a983c9918ccf48a73ed1ee26f7
Commit: a7b083f28f71aae2e371a97a5ff22d966be6e89f
https://github.com/Checkmk/checkmk/commit/a7b083f28f71aae2e371a97a5ff22d966…
Author: Sofia Colakovic <sofia.colakovic(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16173
M agents/plugins/symantec_av
A tests/unit-shell/agents/plugins/test_symantec_av.sh
Log Message:
-----------
16173 SEC symantec_av: Don't run sav command if it isn't owned by root
Symantec Anti Virus plugin uses /opt/Symantec/symantec_antivirus/sav command
to monitor a Symantec Anti Virus installation.
To prevent privilege escalation, the plugin (which is run by root user) must
not run executables which can be changed by less privileged users.
In the default installation, sav command is owned by root and root is the only
user with write permissions, which prevents privilege escalation attacks.
With this Werk, the plugin checks if sav command is owned by root and root
is the only user with write permissions before running the command. If that's not
the case the command won't be run. This prevents privilege escalation attacks if
the permissions of the sav command have been changed.
We rate this with a CVSS of 0 (None) (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N).
This CVSS is primarily meant to please automatic scanners.
CMK-15318
Change-Id: I677d94136bd21cd54461f6e125764754208d99af
Commit: 6f906a28876a3615b19073494bc0ea8756cd9610
https://github.com/Checkmk/checkmk/commit/6f906a28876a3615b19073494bc0ea875…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
A tests/unit-shell/agents/plugins/test_common_plugin_parts.sh
Log Message:
-----------
Add test for common agent plugin code
Change-Id: Ibcb282c05186c80986d6eb2ad1689120cb72eeba
(cherry picked from commit 032044f7d7e05e46e441ef23ccb27293d1dc8644)
Commit: d55e24f61c51dedd96125eafd84ac06f9e0714ef
https://github.com/Checkmk/checkmk/commit/d55e24f61c51dedd96125eafd84ac06f9…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
M tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
Generalize common agent plugin code root_owned()
Pass permissions, owner and group directly and document arguments
Change-Id: I29095c316e1a4cd8bd234b65cbcfbc3867f2a693
Commit: 33ca1797bd16370609838a10a1346ec9f7cd3a58
https://github.com/Checkmk/checkmk/commit/33ca1797bd16370609838a10a1346ec9f…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16232
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/windows/plugins/mk_oracle.ps1
M tests/unit-shell/agents/plugins/test_mk_oracle.sh
Log Message:
-----------
16232 SEC mk_oracle(ps1): Prevent privilege esclation to root
Change-Id: Ia5305b388e6ca286a439a901855c3b83ffcd8d82
JIRA-Ref: CMK-15000
Commit: b00d634a143bcd9da8059263ecdee42247f41c27
https://github.com/Checkmk/checkmk/commit/b00d634a143bcd9da8059263ecdee4224…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16234
M agents/plugins/mk_oracle
Log Message:
-----------
16234 SEC Hide credentials in ps output for mk_oracle
Creds go to
https://tonyhasler.wordpress.com/2008/10/15/hiding-sqlplus-passwords-from-p…
SUP-17435
Change-Id: I0588486baa975cf6e9f1e6b1bef693518194a094
JIRA-Ref: CMK-15000
Commit: 2bc11315273eb7bdbd3ca42f4d726527b204519e
https://github.com/Checkmk/checkmk/commit/2bc11315273eb7bdbd3ca42f4d726527b…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16198
M agents/plugins/mk_informix
Log Message:
-----------
mk_informix: Do not allow privilege escalation
The informix database monitoring plugin would previously `eval` statements parsed from
`$INFORMIXDIR/bin/onstat`. Since the plugin is usually run as root, this could cause
statements injected in `$INFORMIXDIR/bin/onstat` to be run as root as well.
By adding scripts named the same as other functionality found in `$PATH` to
`$INFORMIXDIR/bin`, `$PATH` functionality could also be overshadowed and the custom
executed as root.
Finally, `$INFORMIXDIR/bin/onstat` would be executed as root, allowing a substituted
script to be run with elevated privileges.
With this werk, the environment variables will be exported instead and `$PATH` will now be
searched before `$INFORMIXDIR/bin`.
The plugin will now also check if `$INFORMIXDIR/bin/onstat` belongs to root if the plugin
is executed as root. If not, it will be executed as the user owning the executable.
Change-Id: Idfe1d31c80998c6067baa718df9fb0a5c293eb27
JIRA-Ref: CMK-15000
Commit: 79e692ed9a5b0c4ada54a1467939bd8451e96acb
https://github.com/Checkmk/checkmk/commit/79e692ed9a5b0c4ada54a1467939bd845…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/check_mk_agent.aix
M agents/check_mk_agent.freebsd
M agents/check_mk_agent.hpux
M agents/check_mk_agent.linux
M agents/check_mk_agent.macosx
M agents/check_mk_agent.netbsd
M agents/check_mk_agent.openbsd
M agents/check_mk_agent.openvms
M agents/check_mk_agent.openwrt
M agents/check_mk_agent.solaris
M agents/plugins/apache_status.py
M agents/plugins/asmcmd.sh
M agents/plugins/db2_mem
M agents/plugins/dnsclient
M agents/plugins/hpux_lunstats
M agents/plugins/hpux_statgrab
M agents/plugins/ibm_mq
M agents/plugins/isc_dhcpd.py
M agents/plugins/jar_signature
M agents/plugins/kaspersky_av
M agents/plugins/lnx_container_host_if.linux
M agents/plugins/lnx_quota
M agents/plugins/lvm
M agents/plugins/mailman2_lists
M agents/plugins/mailman3_lists
M agents/plugins/mk_apt
M agents/plugins/mk_ceph
M agents/plugins/mk_cups_queues
M agents/plugins/mk_db2.aix
M agents/plugins/mk_db2.linux
M agents/plugins/mk_docker.py
M agents/plugins/mk_errpt.aix
M agents/plugins/mk_filehandler
M agents/plugins/mk_filestats.py
M agents/plugins/mk_haproxy.freebsd
M agents/plugins/mk_informix
M agents/plugins/mk_inotify.py
M agents/plugins/mk_inventory.aix
M agents/plugins/mk_inventory.linux
M agents/plugins/mk_inventory.solaris
M agents/plugins/mk_iptables
M agents/plugins/mk_jolokia.py
M agents/plugins/mk_logins
M agents/plugins/mk_logwatch.py
M agents/plugins/mk_mongodb.py
M agents/plugins/mk_mysql
M agents/plugins/mk_nfsiostat
M agents/plugins/mk_omreport
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/plugins/mk_postgres.py
M agents/plugins/mk_redis
M agents/plugins/mk_sap.aix
M agents/plugins/mk_sap.py
M agents/plugins/mk_sap_hana
M agents/plugins/mk_saprouter
M agents/plugins/mk_scaleio
M agents/plugins/mk_site_object_counts
M agents/plugins/mk_sshd_config
M agents/plugins/mk_suseconnect
M agents/plugins/mk_tinkerforge.py
M agents/plugins/mk_tsm
M agents/plugins/mk_zypper
M agents/plugins/mtr.py
M agents/plugins/netstat.aix
M agents/plugins/netstat.linux
M agents/plugins/netstat.solaris
M agents/plugins/nfsexports
M agents/plugins/nfsexports.solaris
M agents/plugins/nginx_status.py
M agents/plugins/plesk_backups.py
M agents/plugins/plesk_domains.py
M agents/plugins/runas
M agents/plugins/smart
M agents/plugins/symantec_av
M agents/plugins/unitrends_backup
M agents/plugins/unitrends_replication.py
M agents/plugins/vxvm
M agents/plugins/websphere_mq
M agents/plugins/zorp
M agents/windows/plugins/ad_replication.bat
M agents/windows/plugins/arcserve_backup.ps1
M agents/windows/plugins/citrix_farm.ps1
M agents/windows/plugins/citrix_licenses.vbs
M agents/windows/plugins/citrix_xenapp.ps1
M agents/windows/plugins/hyperv_vms.ps1
M agents/windows/plugins/hyperv_vms_guestinfos.ps1
M agents/windows/plugins/iis_app_pool_state.ps1
M agents/windows/plugins/kaspersky_av_client.vbs
M agents/windows/plugins/mcafee_av_client.bat
M agents/windows/plugins/megaraid.bat
M agents/windows/plugins/mk_dhcp_enabled.bat
M agents/windows/plugins/mk_inventory.vbs
M agents/windows/plugins/mk_msoffice.ps1
M agents/windows/plugins/mk_mysql.vbs
M agents/windows/plugins/mk_oracle.ps1
M agents/windows/plugins/msexch_dag.ps1
M agents/windows/plugins/msexch_database.ps1
M agents/windows/plugins/mssql.vbs
M agents/windows/plugins/netstat_an.bat
M agents/windows/plugins/nvidia_smi.ps1
M agents/windows/plugins/rds_licenses.vbs
M agents/windows/plugins/rstcli.bat
M agents/windows/plugins/sansymphony.ps1
M agents/windows/plugins/storcli.bat
M agents/windows/plugins/tsm_checks.bat
M agents/windows/plugins/veeam_backup_status.ps1
M agents/windows/plugins/win_dhcp_pools.bat
M agents/windows/plugins/win_dmidecode.bat
M agents/windows/plugins/win_license.bat
M agents/windows/plugins/win_printers.ps1
M agents/windows/plugins/windows_broadcom_bonding.bat
M agents/windows/plugins/windows_if.ps1
M agents/windows/plugins/windows_intel_bonding.bat
M agents/windows/plugins/windows_multipath.vbs
M agents/windows/plugins/windows_os_bonding.ps1
M agents/windows/plugins/windows_tasks.ps1
M agents/windows/plugins/windows_updates.vbs
M agents/windows/plugins/wmic_if.bat
M agents/wnx/src/common/wnx_version.h
M bin/livedump
M bin/mkbackup
M cmk/special_agents/agent_jolokia.py
M cmk/special_agents/agent_netapp.py
M cmk/special_agents/agent_splunk.py
M cmk/special_agents/agent_vsphere.py
M cmk/utils/version.py
M configure.ac
M defines.make
M docker_image/Dockerfile
M packages/cmk-agent-ctl/src/constants.rs
Log Message:
-----------
Set version to 2.2.0p25
Change-Id: I511a4ab28bc793d71fdf7b4ec7db56ae24efbe60
Commit: cf3a68d23ba0b5066a1e28a2df0e771db6c1c2fc
https://github.com/Checkmk/checkmk/commit/cf3a68d23ba0b5066a1e28a2df0e771db…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
fix Oracle plugin for Windows
If run as admin and executable is NOT protected from non-admin write access then
1. write error:
XE|FAILURE|Safe execution is not possible: THE-HOST\THE-USER
has 'Write' access to 'c:\path\to\oracle\home\bin\sqlplus.exe'.
Either run the plugin as a user using the rule 'Run plugins and local checks
using non-system account' or disable 'Write', 'Modify' and 'Full
control'
access to the by non-admin users.
2. continue to next instance
otherwise normal execution
TEST: Local manual using installed Windows agent and installed Oracle Express.
1. a user has write access: error similar to above mentioned
2. a user has no write access: no errors
Change-Id: I024ad7e2f4b7375624bc4c9175ad2ea4026a8835
Commit: 6cf5f81eb31a05ccb6948380e34557129363020f
https://github.com/Checkmk/checkmk/commit/6cf5f81eb31a05ccb6948380e34557129…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
fix and polish oracle powershell script
Now admin is correctly and consistently determined.
Change-Id: Iaae439d63afa9e58f3387d5ede3a31b0de2d7a93
Commit: 1336b200e55bde33421f07c755bd6337a21f508e
https://github.com/Checkmk/checkmk/commit/1336b200e55bde33421f07c755bd6337a…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
rebase correct fixes on correct code from the past
Based on mk_oracle.ps1 from 11c28303
Changes:
- skip ALL changes from the `16232 SEC mk_oracle(ps1)`:
SEC CL breaks async monitoring too
- If run as admin and executable is NOT protected from non-admin write access then
1. write error:
XE|FAILURE|Safe execution is not possible: THE-HOST\THE-USER
has 'Write' access to 'c:\path\to\oracle\home\bin\sqlplus.exe'.
Either run the plugin as a user using the rule 'Run plugins and local checks
using non-system account' or disable 'Write', 'Modify' and
'Full control'
access to the by non-admin users.
2. continue to next instance
else
normal execution
- add possibility to silent log in file - internal tools
- use global temp for non-admin mode
Tests. Manual
Change-Id: I60685c102c40f979b3941f7a6af1a21d9852ae52
Commit: 1669273db9f20971edbe1fb3b32e976cf1deb486
https://github.com/Checkmk/checkmk/commit/1669273db9f20971edbe1fb3b32e976cf…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
fix user message in mk_oracle.ps1
Change-Id: Iab44faae665b02db63bfdd204d59aa0ff9d6ec94
Commit: 29bf6df3f194fc5efd2e6110f863ddc277f8355d
https://github.com/Checkmk/checkmk/commit/29bf6df3f194fc5efd2e6110f863ddc27…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
use SID instead of names in mk_oracle.ps1
Change-Id: Ia2503e3f60ee44098bb4ef9d5d26ddc49fa7d354
Commit: 8870893c6547bafaeaf49a6ac4c8da74cebec2f0
https://github.com/Checkmk/checkmk/commit/8870893c6547bafaeaf49a6ac4c8da74c…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: assume 'Domain Admins' and 'Enterprise Admins' are safe
Change-Id: I7efd9e4bddbdf4fc137518191a7f381ca6bbab23
Commit: be0065240a394c649825147861f4838969a74e55
https://github.com/Checkmk/checkmk/commit/be0065240a394c649825147861f483896…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: use sid instead of name
Change-Id: Ia57a97eb85ec889b9fa71f1fea4d123228e9b71f
Commit: c6a88a5e9f619b101fb8866d2b222162e37b42f3
https://github.com/Checkmk/checkmk/commit/c6a88a5e9f619b101fb8866d2b222162e…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: extend checking permissions on tnsping and crsctl
- also tolerant if file missing
Change-Id: I47f755c5c8ec1d87b733d3014ed5f6550aae8857
Commit: 4b8b69cc872d14c642c55f76cc0186cf1138dc49
https://github.com/Checkmk/checkmk/commit/4b8b69cc872d14c642c55f76cc0186cf1…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15843
Log Message:
-----------
15843 FIX mk_oracle(ps1): Follow-up to privilege escalation fix
Change-Id: I1d2f868b41fc6953ee6ded387deeb835eda088f6
Commit: f38580718435c29dd841e4c85f07fa91711428b3
https://github.com/Checkmk/checkmk/commit/f38580718435c29dd841e4c85f07fa917…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/wnx/src/common/wtools.cpp
M agents/wnx/src/engine/stdafx_defines.h
M agents/wnx/src/main/pch.h
M agents/wnx/watest/test-wtools_runas.cpp
Log Message:
-----------
wa: rewrite group user test in RunAs
needed by Oracle upcoming changes
Change-Id: Ic40aab9166f597a034a8478158dc1465b26f1940
Commit: 1b025add1fa88a7a6eba8dc893c280c4701ca644
https://github.com/Checkmk/checkmk/commit/1b025add1fa88a7a6eba8dc893c280c47…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: add possibility to skip oracle permission check
Change-Id: I090e1d432df2a8258dcefded532109568e70ec4d
Commit: 320f8dd5bd63b907f8ae0ba51357f272510835f9
https://github.com/Checkmk/checkmk/commit/320f8dd5bd63b907f8ae0ba51357f2725…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: change error message
Change-Id: Ic19b42d95fbd44ca17b0339620ae01bf76227cdb
Commit: 0f8a193afe69da9ff0b5b95b0d8541d6cceaf091
https://github.com/Checkmk/checkmk/commit/0f8a193afe69da9ff0b5b95b0d8541d6c…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: add `safe list of regexs entries`
Can be used to skip permission security check for
some users or groups specified with a list of regex
Change-Id: Ia3361140f5d72e45ffe32cd717381f4a2a469439
Commit: bcb2a699a44326dd84ad4842b6cf4fbbeed330d6
https://github.com/Checkmk/checkmk/commit/bcb2a699a44326dd84ad4842b6cf4fbbe…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: fix regex check
Change-Id: Ia85b8cf25b565e52a04ab7fef949552ac71fe2d2
Commit: 7f406c83b66d7df2c7e1518e9c51d71b1d94aad5
https://github.com/Checkmk/checkmk/commit/7f406c83b66d7df2c7e1518e9c51d71b1…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: remove regex check
- according to discussion with LM and HR.
- added mention about Oracle permission check in error message
Change-Id: If9ad546f4e1fe30668a1b2f12185875e55a25248
Commit: 7ce4e6a7cd3e42400c42f6037cf6c1ce2a433b5a
https://github.com/Checkmk/checkmk/commit/7ce4e6a7cd3e42400c42f6037cf6c1ce2…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: typo
Change-Id: Id3a5d73d036b953f01b96a14f721e40c49102f16
Commit: 9bd5f5fa45ed4d5362f2a6a74a0ba8790785c0d7
https://github.com/Checkmk/checkmk/commit/9bd5f5fa45ed4d5362f2a6a74a0ba8790…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M .werks/15843
Log Message:
-----------
oracle: fix Windows werk text according current status
Change-Id: Id06b317aca90f1bcb127ac69f443b906db1edb1f
Commit: 34eb74e33404d391304d15a1566a9d0a39b81dee
https://github.com/Checkmk/checkmk/commit/34eb74e33404d391304d15a1566a9d0a3…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: add minor fixes
Name of check is fixed, must be in full sync with WATO:
This is not perfect solution, we will fix it 2.3
Some comments added to make logic more clear.
Change-Id: I4e86dbed2616000fc4e9c35c079d82f4a9bddffa
Commit: ec67fd9eda5c1517c9c09313fc220109967ac25f
https://github.com/Checkmk/checkmk/commit/ec67fd9eda5c1517c9c09313fc2201099…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/wnx/src/common/wtools.cpp
Log Message:
-----------
wa: set max length of the user name to 20
Some Windows in some cases may support only
very short name
Change-Id: I71360694c1c729723ba5420470b87d02078a3026
Commit: 8e52fa24c31d14c7cab72e249c5153fcca2935a0
https://github.com/Checkmk/checkmk/commit/8e52fa24c31d14c7cab72e249c5153fcc…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/wnx/src/common/wtools.cpp
Log Message:
-----------
wa: replace space with underscore in user names
Change-Id: I076298da6a4cee7b796400dff9bfd35d1d49993a
Commit: 981d47397296e694ba9802926de9734c21a7be40
https://github.com/Checkmk/checkmk/commit/981d47397296e694ba9802926de9734c2…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix syntax errors on mk_oracle agent plugin
SUP-18082
Change-Id: Ica669024b54ac727161df2f1c990574797d3ab11
Commit: 3d13eb42f88f63896682bb56e0b7425fb93a4ae0
https://github.com/Checkmk/checkmk/commit/3d13eb42f88f63896682bb56e0b7425fb…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix broken pipe
SUP-18105
Change-Id: Ief4a607c11cc8235e47512826eb1e57d7583fd66
Commit: b2e2856e3a1aa6529768349896f60b294a94a87d
https://github.com/Checkmk/checkmk/commit/b2e2856e3a1aa6529768349896f60b294…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/kaspersky_av
M agents/plugins/mk_informix
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
Log Message:
-----------
extract parts of get_binary_execution_mode
this will be needed for permission checking in mk_oracle
Change-Id: I6bce1ba2abb5fe0e0588af9d25aa8ab53b0499f7
Commit: 09a18128ccc414e7db7ea7da7d0eff5d732299cf
https://github.com/Checkmk/checkmk/commit/09a18128ccc414e7db7ea7da7d0eff5d7…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
use $GREP instead of grep
Change-Id: I442549d24e1d3b13b6393d88ef552c963b9ef602
Commit: 91a605204e99551b6860e5b6b84e3da7be1a5c85
https://github.com/Checkmk/checkmk/commit/91a605204e99551b6860e5b6b84e3da7b…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15330
M agents/plugins/mk_oracle
Log Message:
-----------
15330 FIX mk_oracle: report failed login
Due to fixes introduced with
<a href="https://checkmk.com/werk/16234">Werk #16234</a> a failed
login to the
oracle database was not reported as critical, but the services were going
stale. This is now fixed.
Change-Id: Iae9f9232b9e48d00b752987a0f2dae9a7fa91e0d
Commit: 5385b37fea9eef7b5f64a9e97e9a18ed870d0356
https://github.com/Checkmk/checkmk/commit/5385b37fea9eef7b5f64a9e97e9a18ed8…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
provide hints for changing permissions
Change-Id: I956b7e2f212a92db3128f3e9ed2c4a952246379a
Commit: 3cd89784f2c1708d3a09d6bbaf79243738f58d2d
https://github.com/Checkmk/checkmk/commit/3cd89784f2c1708d3a09d6bbaf7924373…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15327
Log Message:
-----------
15327 FIX mk_oracle: Follow-up to privilege escalation fix
Add werk for mk_oracle related changes
Change-Id: I8ca91c3d189c2b2cb997a120961dbb5428e2d25b
Commit: 18e6f3451355b5890fcd0eab362f646ed974efbe
https://github.com/Checkmk/checkmk/commit/18e6f3451355b5890fcd0eab362f646ed…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15328
M agents/plugins/mk_oracle
Log Message:
-----------
15328 FIX mk_oracle: Follow-up to privilege escalation fix: sqlnet.ora
Change-Id: I30378fbf37c3b9735fd2bb396f376eca9e1de70c
Commit: 2f4013837a88ed68816d4f9b4e00968d73cb4408
https://github.com/Checkmk/checkmk/commit/2f4013837a88ed68816d4f9b4e00968d7…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15329
M checks/oracle_recovery_area
M cmk/base/plugins/agent_based/oracle_processes.py
Log Message:
-----------
15329 FIX mk_oracle: fix two parse errors
refs CMK-16766
Change-Id: Ia1e9dcc1e73cd2ef0129a07a9402997786544deb
Commit: fc6889cf7e8cd96d00c890963c5f7fb141f76d85
https://github.com/Checkmk/checkmk/commit/fc6889cf7e8cd96d00c890963c5f7fb14…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: ignore deleted accounts in safety check
added check for null value: discovered by JPH only machine
Change-Id: Id1e119dccffaae6bec9013ca17f4aee4373d6847
Commit: 463fb8fdc5a57da98c1ae7fd8ea4ca4d7f36172d
https://github.com/Checkmk/checkmk/commit/463fb8fdc5a57da98c1ae7fd8ea4ca4d7…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
export needs_user_switch_before_executing function
Change-Id: Idd4e13c9f798ec7fab2b9fe815a58b1c19638c7d
Commit: 65236b565e0f57dd058f395704b20154aff30847
https://github.com/Checkmk/checkmk/commit/65236b565e0f57dd058f395704b20154a…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-19 (Fri, 19 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: fix message
Change-Id: I7bd2951bb1fef350afddc78d985f1de1fd4cd3ab
Compare: https://github.com/Checkmk/checkmk/compare/9c338a65a6db...65236b565e0f
To unsubscribe from these emails, change your notification settings at
https://github.com/Checkmk/checkmk/settings/notifications