28 May
2024
28 May
'24
5:56 a.m.
Branch: refs/heads/release/2.1.0p42
Home: https://github.com/Checkmk/checkmk
Commit: d6d8dbdb8be0c5433156262d8e9fdeb2d658972e
https://github.com/Checkmk/checkmk/commit/d6d8dbdb8be0c5433156262d8e9fdeb2d…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A tests/agent-unit/test_common_plugin_parts.sh
Log Message:
-----------
Add test for common agent plugin code
Change-Id: Ibcb282c05186c80986d6eb2ad1689120cb72eeba
Commit: cc274cf4c38ce3f78de3e2430657557774f1306b
https://github.com/Checkmk/checkmk/commit/cc274cf4c38ce3f78de3e243065755777…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
A tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
Generalize common agent plugin code
Pass permissions, owner and group directly and document arguments
Change-Id: I29095c316e1a4cd8bd234b65cbcfbc3867f2a693
Commit: 4199b0e5bee54d10c096d73da4618906704c689c
https://github.com/Checkmk/checkmk/commit/4199b0e5bee54d10c096d73da46189067…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16232
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/windows/plugins/mk_oracle.ps1
M tests/unit-shell/agents/plugins/test_mk_oracle.sh
Log Message:
-----------
16232 SEC mk_oracle(ps1): Prevent privilege esclation to root
Change-Id: Ia5305b388e6ca286a439a901855c3b83ffcd8d82
JIRA-Ref: CMK-15000
Commit: 624bc16eae06dc930d8898af66a623d1e3306468
https://github.com/Checkmk/checkmk/commit/624bc16eae06dc930d8898af66a623d1e…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16234
M agents/plugins/mk_oracle
Log Message:
-----------
16234 SEC Hide credentials in ps output for mk_oracle
Creds go to
https://tonyhasler.wordpress.com/2008/10/15/hiding-sqlplus-passwords-from-p…
SUP-17435
Change-Id: I0588486baa975cf6e9f1e6b1bef693518194a094
JIRA-Ref: CMK-15000
Commit: cac32d24e44d44ea964cd09e54e0350cb3403121
https://github.com/Checkmk/checkmk/commit/cac32d24e44d44ea964cd09e54e0350cb…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16198
M agents/plugins/mk_informix
Log Message:
-----------
mk_informix: Do not allow privilege escalation
The informix database monitoring plugin would previously `eval` statements parsed from
`$INFORMIXDIR/bin/onstat`. Since the plugin is usually run as root, this could cause
statements injected in `$INFORMIXDIR/bin/onstat` to be run as root as well.
By adding scripts named the same as other functionality found in `$PATH` to
`$INFORMIXDIR/bin`, `$PATH` functionality could also be overshadowed and the custom
executed as root.
Finally, `$INFORMIXDIR/bin/onstat` would be executed as root, allowing a substituted
script to be run with elevated privileges.
With this werk, the environment variables will be exported instead and `$PATH` will now be
searched before `$INFORMIXDIR/bin`.
The plugin will now also check if `$INFORMIXDIR/bin/onstat` belongs to root if the plugin
is executed as root. If not, it will be executed as the user owning the executable.
Change-Id: Idfe1d31c80998c6067baa718df9fb0a5c293eb27
Commit: 96f784c362720a567b4882295e26a53cc93e5a1f
https://github.com/Checkmk/checkmk/commit/96f784c362720a567b4882295e26a53cc…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/check_mk_agent.aix
M agents/check_mk_agent.freebsd
M agents/check_mk_agent.hpux
M agents/check_mk_agent.linux
M agents/check_mk_agent.macosx
M agents/check_mk_agent.netbsd
M agents/check_mk_agent.openbsd
M agents/check_mk_agent.openvms
M agents/check_mk_agent.openwrt
M agents/check_mk_agent.solaris
M agents/cmk-agent-ctl/src/constants.rs
M agents/plugins/apache_status.py
M agents/plugins/asmcmd.sh
M agents/plugins/db2_mem
M agents/plugins/dnsclient
M agents/plugins/hpux_lunstats
M agents/plugins/hpux_statgrab
M agents/plugins/ibm_mq
M agents/plugins/isc_dhcpd.py
M agents/plugins/jar_signature
M agents/plugins/kaspersky_av
M agents/plugins/lnx_container_host_if.linux
M agents/plugins/lnx_quota
M agents/plugins/lvm
M agents/plugins/mailman_lists
M agents/plugins/mk_apt
M agents/plugins/mk_ceph
M agents/plugins/mk_cups_queues
M agents/plugins/mk_db2.aix
M agents/plugins/mk_db2.linux
M agents/plugins/mk_docker.py
M agents/plugins/mk_errpt.aix
M agents/plugins/mk_filehandler
M agents/plugins/mk_filestats.py
M agents/plugins/mk_haproxy.freebsd
M agents/plugins/mk_informix
M agents/plugins/mk_inotify.py
M agents/plugins/mk_inventory.aix
M agents/plugins/mk_inventory.linux
M agents/plugins/mk_inventory.solaris
M agents/plugins/mk_iptables
M agents/plugins/mk_jolokia.py
M agents/plugins/mk_logins
M agents/plugins/mk_logwatch.py
M agents/plugins/mk_mongodb.py
M agents/plugins/mk_mysql
M agents/plugins/mk_nfsiostat
M agents/plugins/mk_omreport
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/plugins/mk_postgres.py
M agents/plugins/mk_redis
M agents/plugins/mk_sap.aix
M agents/plugins/mk_sap.py
M agents/plugins/mk_sap_hana
M agents/plugins/mk_saprouter
M agents/plugins/mk_scaleio
M agents/plugins/mk_site_object_counts
M agents/plugins/mk_sshd_config
M agents/plugins/mk_suseconnect
M agents/plugins/mk_tinkerforge.py
M agents/plugins/mk_tsm
M agents/plugins/mk_zypper
M agents/plugins/mtr.py
M agents/plugins/netstat.aix
M agents/plugins/netstat.linux
M agents/plugins/netstat.solaris
M agents/plugins/nfsexports
M agents/plugins/nfsexports.solaris
M agents/plugins/nginx_status.py
M agents/plugins/plesk_backups.py
M agents/plugins/plesk_domains.py
M agents/plugins/runas
M agents/plugins/smart
M agents/plugins/symantec_av
M agents/plugins/unitrends_backup
M agents/plugins/unitrends_replication.py
M agents/plugins/vxvm
M agents/plugins/websphere_mq
M agents/plugins/zorp
M agents/windows/plugins/ad_replication.bat
M agents/windows/plugins/arcserve_backup.ps1
M agents/windows/plugins/citrix_farm.ps1
M agents/windows/plugins/citrix_licenses.vbs
M agents/windows/plugins/citrix_xenapp.ps1
M agents/windows/plugins/hyperv_vms.ps1
M agents/windows/plugins/hyperv_vms_guestinfos.ps1
M agents/windows/plugins/iis_app_pool_state.ps1
M agents/windows/plugins/kaspersky_av_client.vbs
M agents/windows/plugins/mcafee_av_client.bat
M agents/windows/plugins/megaraid.bat
M agents/windows/plugins/mk_dhcp_enabled.bat
M agents/windows/plugins/mk_inventory.vbs
M agents/windows/plugins/mk_msoffice.ps1
M agents/windows/plugins/mk_mysql.vbs
M agents/windows/plugins/mk_oracle.ps1
M agents/windows/plugins/msexch_dag.ps1
M agents/windows/plugins/msexch_database.ps1
M agents/windows/plugins/mssql.vbs
M agents/windows/plugins/netstat_an.bat
M agents/windows/plugins/rds_licenses.vbs
M agents/windows/plugins/rstcli.bat
M agents/windows/plugins/sansymphony.ps1
M agents/windows/plugins/storcli.bat
M agents/windows/plugins/tsm_checks.bat
M agents/windows/plugins/veeam_backup_status.ps1
M agents/windows/plugins/win_dhcp_pools.bat
M agents/windows/plugins/win_dmidecode.bat
M agents/windows/plugins/win_license.bat
M agents/windows/plugins/win_printers.ps1
M agents/windows/plugins/windows_broadcom_bonding.bat
M agents/windows/plugins/windows_if.ps1
M agents/windows/plugins/windows_intel_bonding.bat
M agents/windows/plugins/windows_multipath.vbs
M agents/windows/plugins/windows_os_bonding.ps1
M agents/windows/plugins/windows_tasks.ps1
M agents/windows/plugins/windows_updates.vbs
M agents/windows/plugins/wmic_if.bat
M agents/wnx/src/common/wnx_version.h
M bin/livedump
M bin/mkbackup
M bin/mkbench
M cmk/utils/version.py
M configure.ac
M defines.make
M docker/Dockerfile
Log Message:
-----------
Set version to 2.1.0p42
Change-Id: I3bda786ccf346c37626e9e4bf624281f6263f4fc
Commit: 7b3a3070d321ba932190f32311b073520c97ff98
https://github.com/Checkmk/checkmk/commit/7b3a3070d321ba932190f32311b073520…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix syntax errors on mk_oracle agent plugin
SUP-18082
Change-Id: Ica669024b54ac727161df2f1c990574797d3ab11
Commit: bb020c9c326d904ea7be08beead263ef3cb1ad05
https://github.com/Checkmk/checkmk/commit/bb020c9c326d904ea7be08beead263ef3…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix broken pipe
SUP-18105
Change-Id: Ief4a607c11cc8235e47512826eb1e57d7583fd66
Commit: 0ebb2e20423f120bfa09a73d48a424265af57fb6
https://github.com/Checkmk/checkmk/commit/0ebb2e20423f120bfa09a73d48a424265…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/kaspersky_av
M agents/plugins/mk_informix
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
Log Message:
-----------
extract parts of get_binary_execution_mode
this will be needed for permission checking in mk_oracle
Change-Id: I6bce1ba2abb5fe0e0588af9d25aa8ab53b0499f7
Commit: 9ec52fc823a7221f66e890e3abff56f9892cb7e0
https://github.com/Checkmk/checkmk/commit/9ec52fc823a7221f66e890e3abff56f98…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
use $GREP instead of grep
Change-Id: I442549d24e1d3b13b6393d88ef552c963b9ef602
Commit: e2f8b3c139e322aff51f480e33fa4012f1c2e9e9
https://github.com/Checkmk/checkmk/commit/e2f8b3c139e322aff51f480e33fa4012f…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15330
M agents/plugins/mk_oracle
Log Message:
-----------
15330 FIX mk_oracle: report failed login
Due to fixes introduced with
<a href="https://checkmk.com/werk/16234">Werk #16234</a> a failed
login to the
oracle database was not reported as critical, but the services were going
stale. This is now fixed.
Change-Id: Iae9f9232b9e48d00b752987a0f2dae9a7fa91e0d
Commit: 684d165bbe1919655fda1a37064856c7cdcc8d35
https://github.com/Checkmk/checkmk/commit/684d165bbe1919655fda1a37064856c7c…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
provide hints for changing permissions
Change-Id: I956b7e2f212a92db3128f3e9ed2c4a952246379a
Commit: 09e68e5c0017b60ca7b6ef6a0514cf118f26ddfa
https://github.com/Checkmk/checkmk/commit/09e68e5c0017b60ca7b6ef6a0514cf118…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15327
Log Message:
-----------
15327 FIX mk_oracle: Follow-up to privilege escalation fix
Add werk for mk_oracle related changes
Change-Id: I8ca91c3d189c2b2cb997a120961dbb5428e2d25b
Commit: 219f26bddc7cabf9897bf7ad8d51b0a5870158f6
https://github.com/Checkmk/checkmk/commit/219f26bddc7cabf9897bf7ad8d51b0a58…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15328
M agents/plugins/mk_oracle
Log Message:
-----------
15328 FIX mk_oracle: Follow-up to privilege escalation fix: sqlnet.ora
Change-Id: I30378fbf37c3b9735fd2bb396f376eca9e1de70c
Commit: aa4f43e82cb0e65fdb4f1f01d6f55cb6465697bc
https://github.com/Checkmk/checkmk/commit/aa4f43e82cb0e65fdb4f1f01d6f55cb64…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15329
M checks/oracle_processes
M checks/oracle_recovery_area
Log Message:
-----------
15329 FIX mk_oracle: fix two parse errors
refs CMK-16766
Change-Id: Ia1e9dcc1e73cd2ef0129a07a9402997786544deb
Commit: 4b47f6e943eed99d1b452dc89406e597f9849782
https://github.com/Checkmk/checkmk/commit/4b47f6e943eed99d1b452dc89406e597f…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
export needs_user_switch_before_executing function
Change-Id: Idd4e13c9f798ec7fab2b9fe815a58b1c19638c7d
Commit: bfee3f1f00fe8e47768e367fda3548a73ab246fb
https://github.com/Checkmk/checkmk/commit/bfee3f1f00fe8e47768e367fda3548a73…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
A .werks/15843
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
15843 FIX mk_oracle(ps1): Follow-up to privilege escalation fix
Change-Id: I1d2f868b41fc6953ee6ded387deeb835eda088f6
Commit: ce6a5a7c715d892b63af5fa5eef7b1d410de60eb
https://github.com/Checkmk/checkmk/commit/ce6a5a7c715d892b63af5fa5eef7b1d41…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M .werks/15843
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
oracle: fix mk_oracle.ps1 and werk
Change-Id: Ica1fb33144cd3f7f437d6f1d5420939c1d391b84
Commit: 9eaa24d881e4321ff84d0546906ccee4053ace24
https://github.com/Checkmk/checkmk/commit/9eaa24d881e4321ff84d0546906ccee40…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-04-22 (Mon, 22 Apr 2024)
Changed paths:
M Pipfile
M Pipfile.lock
R omd/packages/python3-modules/github-com.pem
M omd/packages/python3-modules/python3-modules.make
Log Message:
-----------
Update pymssql
... and remove building from github
Change-Id: Iae02683fe176a02c2e1c5d7b1201c9e03e29af51
Compare: https://github.com/Checkmk/checkmk/compare/42a52411ba08...9eaa24d881e4
To unsubscribe from these emails, change your notification settings at
https://github.com/Checkmk/checkmk/settings/notifications