Branch: refs/heads/release/2.2.0p25
Home:
https://github.com/Checkmk/checkmk
Commit: 82641716eefcfb46d110f9ad59e87d9c2dd8f692
https://github.com/Checkmk/checkmk/commit/82641716eefcfb46d110f9ad59e87d9c2…
Author: Sofia Colakovic <sofia.colakovic(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16172
M agents/plugins/kaspersky_av
A tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
16172 SEC kaspersky_av: Don't run kav4fs-control or kesl-control if they aren't
owned by root
Kaspersky Anti-Virus plugin uses /opt/kaspersky/kav4fs/bin/kav4fs-control and
/opt/kaspersky/kesl/bin/kesl-control commands to monitor a Kaspersky Anti-Virus
installation.
To prevent privilege escalation, the plugin (which is run by root user) must
not run executables which can be changed by less privileged users.
In the default installation, kav4fs-control and kesl-control commands are owned
by root and root is the only user with write permissions, which prevents privilege
escalation attacks.
With this Werk, the plugin checks if control commands are owned by root and root
is the only user with write permissions before running the command. If that's not
the case the commands won't be run. This prevents privilege escalation attacks if
the permissions of the control commands have been changed.
CMK-15318
Change-Id: Ie5de60541dbd76a983c9918ccf48a73ed1ee26f7
Commit: 9b2c22c27dc16f7cfbc6160cc3299bf6c6872cee
https://github.com/Checkmk/checkmk/commit/9b2c22c27dc16f7cfbc6160cc3299bf6c…
Author: Sofia Colakovic <sofia.colakovic(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16173
M agents/plugins/symantec_av
A tests/unit-shell/agents/plugins/test_symantec_av.sh
Log Message:
-----------
16173 SEC symantec_av: Don't run sav command if it isn't owned by root
Symantec Anti Virus plugin uses /opt/Symantec/symantec_antivirus/sav command
to monitor a Symantec Anti Virus installation.
To prevent privilege escalation, the plugin (which is run by root user) must
not run executables which can be changed by less privileged users.
In the default installation, sav command is owned by root and root is the only
user with write permissions, which prevents privilege escalation attacks.
With this Werk, the plugin checks if sav command is owned by root and root
is the only user with write permissions before running the command. If that's not
the case the command won't be run. This prevents privilege escalation attacks if
the permissions of the sav command have been changed.
We rate this with a CVSS of 0 (None) (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N).
This CVSS is primarily meant to please automatic scanners.
CMK-15318
Change-Id: I677d94136bd21cd54461f6e125764754208d99af
Commit: 8549c2fc736474e89cc2e2edd9da079c85f6adec
https://github.com/Checkmk/checkmk/commit/8549c2fc736474e89cc2e2edd9da079c8…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
A tests/unit-shell/agents/plugins/test_common_plugin_parts.sh
Log Message:
-----------
Add test for common agent plugin code
Change-Id: Ibcb282c05186c80986d6eb2ad1689120cb72eeba
(cherry picked from commit 6496a9f4053e75eeb28d61c5ccc710eef34dcaae)
Commit: 57edebd39b58ae625b135308a4081c2b4eca64b8
https://github.com/Checkmk/checkmk/commit/57edebd39b58ae625b135308a4081c2b4…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
M agents/plugins/kaspersky_av
M tests/unit-shell/agents/plugins/test_kaspersky_av.sh
Log Message:
-----------
Generalize common agent plugin code root_owned()
Pass permissions, owner and group directly and document arguments
Change-Id: I29095c316e1a4cd8bd234b65cbcfbc3867f2a693
Commit: be494ee39e4655f443e32612950903d43a4d96e0
https://github.com/Checkmk/checkmk/commit/be494ee39e4655f443e32612950903d43…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16232
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/windows/plugins/mk_oracle.ps1
M tests/unit-shell/agents/plugins/test_mk_oracle.sh
Log Message:
-----------
16232 SEC mk_oracle(ps1): Prevent privilege esclation to root
Change-Id: Ia5305b388e6ca286a439a901855c3b83ffcd8d82
JIRA-Ref: CMK-15000
Commit: 6a4ed9446738d343e5cca996486ee2580a9df370
https://github.com/Checkmk/checkmk/commit/6a4ed9446738d343e5cca996486ee2580…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16234
M agents/plugins/mk_oracle
Log Message:
-----------
16234 SEC Hide credentials in ps output for mk_oracle
Creds go to
https://tonyhasler.wordpress.com/2008/10/15/hiding-sqlplus-passwords-from-p…
SUP-17435
Change-Id: I0588486baa975cf6e9f1e6b1bef693518194a094
JIRA-Ref: CMK-15000
Commit: c108f86a8c7217102fafb40c1f2cda5060669fd9
https://github.com/Checkmk/checkmk/commit/c108f86a8c7217102fafb40c1f2cda506…
Author: Rebekka Seltmann <rebekka.seltmann(a)checkmk.com>
Date: 2024-03-20 (Wed, 20 Mar 2024)
Changed paths:
A .werks/16198
M agents/plugins/mk_informix
Log Message:
-----------
mk_informix: Do not allow privilege escalation
The informix database monitoring plugin would previously `eval` statements parsed from
`$INFORMIXDIR/bin/onstat`. Since the plugin is usually run as root, this could cause
statements injected in `$INFORMIXDIR/bin/onstat` to be run as root as well.
By adding scripts named the same as other functionality found in `$PATH` to
`$INFORMIXDIR/bin`, `$PATH` functionality could also be overshadowed and the custom
executed as root.
Finally, `$INFORMIXDIR/bin/onstat` would be executed as root, allowing a substituted
script to be run with elevated privileges.
With this werk, the environment variables will be exported instead and `$PATH` will now be
searched before `$INFORMIXDIR/bin`.
The plugin will now also check if `$INFORMIXDIR/bin/onstat` belongs to root if the plugin
is executed as root. If not, it will be executed as the user owning the executable.
Change-Id: Idfe1d31c80998c6067baa718df9fb0a5c293eb27
JIRA-Ref: CMK-15000
Commit: 1144bacc10f9006f28e391ef9d23c84f8130a1e2
https://github.com/Checkmk/checkmk/commit/1144bacc10f9006f28e391ef9d23c84f8…
Author: Timotheus Bachinger <timotheus.bachinger(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/check_mk_agent.aix
M agents/check_mk_agent.freebsd
M agents/check_mk_agent.hpux
M agents/check_mk_agent.linux
M agents/check_mk_agent.macosx
M agents/check_mk_agent.netbsd
M agents/check_mk_agent.openbsd
M agents/check_mk_agent.openvms
M agents/check_mk_agent.openwrt
M agents/check_mk_agent.solaris
M agents/plugins/apache_status.py
M agents/plugins/asmcmd.sh
M agents/plugins/db2_mem
M agents/plugins/dnsclient
M agents/plugins/hpux_lunstats
M agents/plugins/hpux_statgrab
M agents/plugins/ibm_mq
M agents/plugins/isc_dhcpd.py
M agents/plugins/jar_signature
M agents/plugins/kaspersky_av
M agents/plugins/lnx_container_host_if.linux
M agents/plugins/lnx_quota
M agents/plugins/lvm
M agents/plugins/mailman2_lists
M agents/plugins/mailman3_lists
M agents/plugins/mk_apt
M agents/plugins/mk_ceph
M agents/plugins/mk_cups_queues
M agents/plugins/mk_db2.aix
M agents/plugins/mk_db2.linux
M agents/plugins/mk_docker.py
M agents/plugins/mk_errpt.aix
M agents/plugins/mk_filehandler
M agents/plugins/mk_filestats.py
M agents/plugins/mk_haproxy.freebsd
M agents/plugins/mk_informix
M agents/plugins/mk_inotify.py
M agents/plugins/mk_inventory.aix
M agents/plugins/mk_inventory.linux
M agents/plugins/mk_inventory.solaris
M agents/plugins/mk_iptables
M agents/plugins/mk_jolokia.py
M agents/plugins/mk_logins
M agents/plugins/mk_logwatch.py
M agents/plugins/mk_mongodb.py
M agents/plugins/mk_mysql
M agents/plugins/mk_nfsiostat
M agents/plugins/mk_omreport
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
M agents/plugins/mk_postgres.py
M agents/plugins/mk_redis
M agents/plugins/mk_sap.aix
M agents/plugins/mk_sap.py
M agents/plugins/mk_sap_hana
M agents/plugins/mk_saprouter
M agents/plugins/mk_scaleio
M agents/plugins/mk_site_object_counts
M agents/plugins/mk_sshd_config
M agents/plugins/mk_suseconnect
M agents/plugins/mk_tinkerforge.py
M agents/plugins/mk_tsm
M agents/plugins/mk_zypper
M agents/plugins/mtr.py
M agents/plugins/netstat.aix
M agents/plugins/netstat.linux
M agents/plugins/netstat.solaris
M agents/plugins/nfsexports
M agents/plugins/nfsexports.solaris
M agents/plugins/nginx_status.py
M agents/plugins/plesk_backups.py
M agents/plugins/plesk_domains.py
M agents/plugins/runas
M agents/plugins/smart
M agents/plugins/symantec_av
M agents/plugins/unitrends_backup
M agents/plugins/unitrends_replication.py
M agents/plugins/vxvm
M agents/plugins/websphere_mq
M agents/plugins/zorp
M agents/windows/plugins/ad_replication.bat
M agents/windows/plugins/arcserve_backup.ps1
M agents/windows/plugins/citrix_farm.ps1
M agents/windows/plugins/citrix_licenses.vbs
M agents/windows/plugins/citrix_xenapp.ps1
M agents/windows/plugins/hyperv_vms.ps1
M agents/windows/plugins/hyperv_vms_guestinfos.ps1
M agents/windows/plugins/iis_app_pool_state.ps1
M agents/windows/plugins/kaspersky_av_client.vbs
M agents/windows/plugins/mcafee_av_client.bat
M agents/windows/plugins/megaraid.bat
M agents/windows/plugins/mk_dhcp_enabled.bat
M agents/windows/plugins/mk_inventory.vbs
M agents/windows/plugins/mk_msoffice.ps1
M agents/windows/plugins/mk_mysql.vbs
M agents/windows/plugins/mk_oracle.ps1
M agents/windows/plugins/msexch_dag.ps1
M agents/windows/plugins/msexch_database.ps1
M agents/windows/plugins/mssql.vbs
M agents/windows/plugins/netstat_an.bat
M agents/windows/plugins/nvidia_smi.ps1
M agents/windows/plugins/rds_licenses.vbs
M agents/windows/plugins/rstcli.bat
M agents/windows/plugins/sansymphony.ps1
M agents/windows/plugins/storcli.bat
M agents/windows/plugins/tsm_checks.bat
M agents/windows/plugins/veeam_backup_status.ps1
M agents/windows/plugins/win_dhcp_pools.bat
M agents/windows/plugins/win_dmidecode.bat
M agents/windows/plugins/win_license.bat
M agents/windows/plugins/win_printers.ps1
M agents/windows/plugins/windows_broadcom_bonding.bat
M agents/windows/plugins/windows_if.ps1
M agents/windows/plugins/windows_intel_bonding.bat
M agents/windows/plugins/windows_multipath.vbs
M agents/windows/plugins/windows_os_bonding.ps1
M agents/windows/plugins/windows_tasks.ps1
M agents/windows/plugins/windows_updates.vbs
M agents/windows/plugins/wmic_if.bat
M agents/wnx/src/common/wnx_version.h
M bin/livedump
M bin/mkbackup
M cmk/special_agents/agent_jolokia.py
M cmk/special_agents/agent_netapp.py
M cmk/special_agents/agent_splunk.py
M cmk/special_agents/agent_vsphere.py
M cmk/utils/version.py
M configure.ac
M defines.make
M docker_image/Dockerfile
M enterprise/agents/plugins/cmk_update_agent.py
M enterprise/bin/cmcdump
M packages/cmk-agent-ctl/src/constants.rs
Log Message:
-----------
Set version to 2.2.0p25
Change-Id: I511a4ab28bc793d71fdf7b4ec7db56ae24efbe60
Commit: be204ae0a1c515481f001a249adc10490600a1c1
https://github.com/Checkmk/checkmk/commit/be204ae0a1c515481f001a249adc10490…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
fix Oracle plugin for Windows
If run as admin and executable is NOT protected from non-admin write access then
1. write error:
XE|FAILURE|Safe execution is not possible: THE-HOST\THE-USER
has 'Write' access to 'c:\path\to\oracle\home\bin\sqlplus.exe'.
Either run the plugin as a user using the rule 'Run plugins and local checks
using non-system account' or disable 'Write', 'Modify' and 'Full
control'
access to the by non-admin users.
2. continue to next instance
otherwise normal execution
TEST: Local manual using installed Windows agent and installed Oracle Express.
1. a user has write access: error similar to above mentioned
2. a user has no write access: no errors
Change-Id: I024ad7e2f4b7375624bc4c9175ad2ea4026a8835
Commit: 458f0efa2cae85e9666ffbd1c88958fd8667a06c
https://github.com/Checkmk/checkmk/commit/458f0efa2cae85e9666ffbd1c88958fd8…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
fix and polish oracle powershell script
Now admin is correctly and consistently determined.
Change-Id: Iaae439d63afa9e58f3387d5ede3a31b0de2d7a93
Commit: b680a63ad351c6267cdb37b0242ce3be8453690d
https://github.com/Checkmk/checkmk/commit/b680a63ad351c6267cdb37b0242ce3be8…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
rebase correct fixes on correct code from the past
Based on mk_oracle.ps1 from 11c28303
Changes:
- skip ALL changes from the `16232 SEC mk_oracle(ps1)`:
SEC CL breaks async monitoring too
- If run as admin and executable is NOT protected from non-admin write access then
1. write error:
XE|FAILURE|Safe execution is not possible: THE-HOST\THE-USER
has 'Write' access to 'c:\path\to\oracle\home\bin\sqlplus.exe'.
Either run the plugin as a user using the rule 'Run plugins and local checks
using non-system account' or disable 'Write', 'Modify' and
'Full control'
access to the by non-admin users.
2. continue to next instance
else
normal execution
- add possibility to silent log in file - internal tools
- use global temp for non-admin mode
Tests. Manual
Change-Id: I60685c102c40f979b3941f7a6af1a21d9852ae52
Commit: bb460267679ef6fc18b9a090a2cee13822dc411c
https://github.com/Checkmk/checkmk/commit/bb460267679ef6fc18b9a090a2cee1382…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
fix user message in mk_oracle.ps1
Change-Id: Iab44faae665b02db63bfdd204d59aa0ff9d6ec94
Commit: c0703fcb1eefdd67920412da03e751427d1d7506
https://github.com/Checkmk/checkmk/commit/c0703fcb1eefdd67920412da03e751427…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
use SID instead of names in mk_oracle.ps1
Change-Id: Ia2503e3f60ee44098bb4ef9d5d26ddc49fa7d354
Commit: 04b2f43afb6967fa026b301a08d12012da4a9acd
https://github.com/Checkmk/checkmk/commit/04b2f43afb6967fa026b301a08d12012d…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: assume 'Domain Admins' and 'Enterprise Admins' are safe
Change-Id: I7efd9e4bddbdf4fc137518191a7f381ca6bbab23
Commit: ff7260c38945d0503e2a58237730427f8e49b8b3
https://github.com/Checkmk/checkmk/commit/ff7260c38945d0503e2a58237730427f8…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: use sid instead of name
Change-Id: Ia57a97eb85ec889b9fa71f1fea4d123228e9b71f
Commit: df8726ed735c93f24de5fb44ba2249e27c0c5a94
https://github.com/Checkmk/checkmk/commit/df8726ed735c93f24de5fb44ba2249e27…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: extend checking permissions on tnsping and crsctl
- also tolerant if file missing
Change-Id: I47f755c5c8ec1d87b733d3014ed5f6550aae8857
Commit: 549b93570570138e6fdb77af9aa069304e6dea9b
https://github.com/Checkmk/checkmk/commit/549b93570570138e6fdb77af9aa069304…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15843
Log Message:
-----------
15843 FIX mk_oracle(ps1): Follow-up to privilege escalation fix
Change-Id: I1d2f868b41fc6953ee6ded387deeb835eda088f6
Commit: 17a9bf4be844fcdbd9b8c62062cdd14d0b26ec05
https://github.com/Checkmk/checkmk/commit/17a9bf4be844fcdbd9b8c62062cdd14d0…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/wnx/src/common/wtools.cpp
M agents/wnx/src/engine/stdafx_defines.h
M agents/wnx/src/main/pch.h
M agents/wnx/watest/test-wtools_runas.cpp
Log Message:
-----------
wa: rewrite group user test in RunAs
needed by Oracle upcoming changes
Change-Id: Ic40aab9166f597a034a8478158dc1465b26f1940
Commit: 893d47e88236f5083573a13c4a72151f3740cc5d
https://github.com/Checkmk/checkmk/commit/893d47e88236f5083573a13c4a72151f3…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: add possibility to skip oracle permission check
Change-Id: I090e1d432df2a8258dcefded532109568e70ec4d
Commit: c9395dc3c3c5ce168a6347edff436679a1b381cc
https://github.com/Checkmk/checkmk/commit/c9395dc3c3c5ce168a6347edff436679a…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: change error message
Change-Id: Ic19b42d95fbd44ca17b0339620ae01bf76227cdb
Commit: 64852d315359ff30824a5ade2ad5dd753fd89244
https://github.com/Checkmk/checkmk/commit/64852d315359ff30824a5ade2ad5dd753…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: add `safe list of regexs entries`
Can be used to skip permission security check for
some users or groups specified with a list of regex
Change-Id: Ia3361140f5d72e45ffe32cd717381f4a2a469439
Commit: c299ff14078fba765f903a905b0965a91c373482
https://github.com/Checkmk/checkmk/commit/c299ff14078fba765f903a905b0965a91…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: fix regex check
Change-Id: Ia85b8cf25b565e52a04ab7fef949552ac71fe2d2
Commit: 44f9f32f0a84dfd63594e4196ca669a492509c6b
https://github.com/Checkmk/checkmk/commit/44f9f32f0a84dfd63594e4196ca669a49…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: remove regex check
- according to discussion with LM and HR.
- added mention about Oracle permission check in error message
Change-Id: If9ad546f4e1fe30668a1b2f12185875e55a25248
Commit: acadcea78e2c6a83a885501ba5f20dd6f8c211e3
https://github.com/Checkmk/checkmk/commit/acadcea78e2c6a83a885501ba5f20dd6f…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: typo
Change-Id: Id3a5d73d036b953f01b96a14f721e40c49102f16
Commit: c227d8e8372a501c732c7fdb1fb5380536892c70
https://github.com/Checkmk/checkmk/commit/c227d8e8372a501c732c7fdb1fb538053…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M cmk/base/cee/plugins/bakery/mk_oracle.py
M cmk/gui/cee/plugins/wato/agent_bakery/rulespecs/mk_oracle.py
M tests/unit/cmk/base/cee/plugins/bakery/mk_oracle.py
Log Message:
-----------
mk_oracle.ps1: add in WATO oracle permission management
add possibility to manage Oracle binaries security check:
disable at all or add some users to white list
TESTS: Manual with .f12 and install on Windows
Change-Id: Iad846b80a6d31b49045cf0fdb218faa9154f2176
Commit: f8c85af283285fdc5fc0e5954c3b4b7f50cadc4c
https://github.com/Checkmk/checkmk/commit/f8c85af283285fdc5fc0e5954c3b4b7f5…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M .werks/15843
Log Message:
-----------
oracle: fix Windows werk text according current status
Change-Id: Id06b317aca90f1bcb127ac69f443b906db1edb1f
Commit: a6dcf1f04fdedb66359dd86757d8aa6860b6ba2b
https://github.com/Checkmk/checkmk/commit/a6dcf1f04fdedb66359dd86757d8aa686…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: add minor fixes
Name of check is fixed, must be in full sync with WATO:
This is not perfect solution, we will fix it 2.3
Some comments added to make logic more clear.
Change-Id: I4e86dbed2616000fc4e9c35c079d82f4a9bddffa
Commit: 180dbb8101bf75e4198f2676cd957d9c791391ad
https://github.com/Checkmk/checkmk/commit/180dbb8101bf75e4198f2676cd957d9c7…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/wnx/src/common/wtools.cpp
Log Message:
-----------
wa: set max length of the user name to 20
Some Windows in some cases may support only
very short name
Change-Id: I71360694c1c729723ba5420470b87d02078a3026
Commit: 432e3381d5e69bbfdab3a281938ad1caa0159cde
https://github.com/Checkmk/checkmk/commit/432e3381d5e69bbfdab3a281938ad1caa…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/wnx/src/common/wtools.cpp
Log Message:
-----------
wa: replace space with underscore in user names
Change-Id: I076298da6a4cee7b796400dff9bfd35d1d49993a
Commit: d9e063cfd998ac64662d32b876681b89b5513903
https://github.com/Checkmk/checkmk/commit/d9e063cfd998ac64662d32b876681b89b…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix syntax errors on mk_oracle agent plugin
SUP-18082
Change-Id: Ica669024b54ac727161df2f1c990574797d3ab11
Commit: 26e74e81761fcfe620dde0411d4f4d32ad62794c
https://github.com/Checkmk/checkmk/commit/26e74e81761fcfe620dde0411d4f4d32a…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
fix broken pipe
SUP-18105
Change-Id: Ief4a607c11cc8235e47512826eb1e57d7583fd66
Commit: b07d5ba0f946b59bd882e8f0226c1ef3094a41cb
https://github.com/Checkmk/checkmk/commit/b07d5ba0f946b59bd882e8f0226c1ef30…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/kaspersky_av
M agents/plugins/mk_informix
M agents/plugins/mk_oracle
M agents/plugins/mk_oracle_crs
Log Message:
-----------
extract parts of get_binary_execution_mode
this will be needed for permission checking in mk_oracle
Change-Id: I6bce1ba2abb5fe0e0588af9d25aa8ab53b0499f7
Commit: 4095cce06545814e006e34048aa437ff1b2861e2
https://github.com/Checkmk/checkmk/commit/4095cce06545814e006e34048aa437ff1…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
use $GREP instead of grep
Change-Id: I442549d24e1d3b13b6393d88ef552c963b9ef602
Commit: d1ed7308096db2833e9729744415ffc8890b6b65
https://github.com/Checkmk/checkmk/commit/d1ed7308096db2833e9729744415ffc88…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15330
M agents/plugins/mk_oracle
Log Message:
-----------
15330 FIX mk_oracle: report failed login
Due to fixes introduced with
<a
href="https://checkmk.com/werk/16234">Werk #16234</a> a failed
login to the
oracle database was not reported as critical, but the services were going
stale. This is now fixed.
Change-Id: Iae9f9232b9e48d00b752987a0f2dae9a7fa91e0d
Commit: 4426709f4c391f21a2f2c6b1845fb62d90760a21
https://github.com/Checkmk/checkmk/commit/4426709f4c391f21a2f2c6b1845fb62d9…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
provide hints for changing permissions
Change-Id: I956b7e2f212a92db3128f3e9ed2c4a952246379a
Commit: 13e246a91df3d01ef0d9b02e2b7200fe792c8ebd
https://github.com/Checkmk/checkmk/commit/13e246a91df3d01ef0d9b02e2b7200fe7…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15327
Log Message:
-----------
15327 FIX mk_oracle: Follow-up to privilege escalation fix
Add werk for mk_oracle related changes
Change-Id: I8ca91c3d189c2b2cb997a120961dbb5428e2d25b
Commit: 133472f35ad60c2dea24972f74b2c18eb484d9fa
https://github.com/Checkmk/checkmk/commit/133472f35ad60c2dea24972f74b2c18eb…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15328
M agents/plugins/mk_oracle
M cmk/base/cee/plugins/bakery/mk_oracle.py
M cmk/gui/cee/plugins/wato/agent_bakery/rulespecs/mk_oracle.py
M tests/unit/cmk/base/cee/plugins/bakery/mk_oracle.py
Log Message:
-----------
15328 FIX mk_oracle: Follow-up to privilege escalation fix: sqlnet.ora
Change-Id: I30378fbf37c3b9735fd2bb396f376eca9e1de70c
Commit: 75d0923672b9b09e4ec3347b4675a270024b5bfb
https://github.com/Checkmk/checkmk/commit/75d0923672b9b09e4ec3347b4675a2700…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
A .werks/15329
M checks/oracle_recovery_area
M cmk/base/plugins/agent_based/oracle_processes.py
Log Message:
-----------
15329 FIX mk_oracle: fix two parse errors
refs CMK-16766
Change-Id: Ia1e9dcc1e73cd2ef0129a07a9402997786544deb
Commit: 5acb352ea983a80a7a43ff1e0feb78b52957985f
https://github.com/Checkmk/checkmk/commit/5acb352ea983a80a7a43ff1e0feb78b52…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: ignore deleted accounts in safety check
added check for null value: discovered by JPH only machine
Change-Id: Id1e119dccffaae6bec9013ca17f4aee4373d6847
Commit: d78522ea67da8c2a1411e06ba38d04d0a2b90be8
https://github.com/Checkmk/checkmk/commit/d78522ea67da8c2a1411e06ba38d04d0a…
Author: Benedikt Seidl <benedikt.seidl(a)checkmk.com>
Date: 2024-04-18 (Thu, 18 Apr 2024)
Changed paths:
M agents/plugins/mk_oracle
Log Message:
-----------
export needs_user_switch_before_executing function
Change-Id: Idd4e13c9f798ec7fab2b9fe815a58b1c19638c7d
Commit: 1091a9b4eaef0962f335de37896330c6a800f631
https://github.com/Checkmk/checkmk/commit/1091a9b4eaef0962f335de37896330c6a…
Author: Sergey Kipnis <sergey.kipnis(a)checkmk.com>
Date: 2024-04-19 (Fri, 19 Apr 2024)
Changed paths:
M agents/windows/plugins/mk_oracle.ps1
Log Message:
-----------
mk_oracle.ps1: fix message
Change-Id: I7bd2951bb1fef350afddc78d985f1de1fd4cd3ab
Compare:
https://github.com/Checkmk/checkmk/compare/65236b565e0f...1091a9b4eaef
To unsubscribe from these emails, change your notification settings at
https://github.com/Checkmk/checkmk/settings/notifications