Checkmk werks level1 May 2019

checkmk-werks-lvl1@lists.checkmk.com

6 participants
12 discussions

Check_MK Werk 7476: Allow shell interpreted characters in agent encryption phrase

by Moritz Kiemer

ID: 7476 Title: Allow shell interpreted characters in agent encryption phrase Component: WATO Level: 1 Class: Bug fix Version: 1.6.0i1 Perviously the passphrase was not properly escaped, such that characters with special meaning to the shell lead to unencrypted agent data.

5 years, 4 months

Check_MK Werk 7475: ceph_status: Adapt to new health field name 'status'

by Moritz Kiemer

ID: 7475 Title: ceph_status: Adapt to new health field name 'status' Component: Checks & agents Level: 1 Class: New feature Version: 1.6.0i1 Ceph health' JSON format has changed in luminous, which lead to a false {WARN} state for affected devices.

5 years, 4 months

Check_MK Werk 7259: Fixed bug with host discovery causing steadily increasing CPU load on the monitoring system.

by Andreas Boesl

ID: 7259 Title: Fixed bug with host discovery causing steadily increasing CPU load on the monitoring system. Component: Checks & agents Level: 1 Class: Bug fix Version: 1.6.0i1 A host service discovery could modify the monitoring cores live configuration. The monitoring core detects this deviation and restarts the Check_MK helper. However, the restarted helper uses the new configuration, whereas the core still uses the old configuration - causing another restart... This has been fixed.

5 years, 4 months

Check_MK Werk 7398: heartbeat_crm: Inconsistent parameter format

by Moritz Kiemer

ID: 7398 Title: heartbeat_crm: Inconsistent parameter format Component: Checks & agents Level: 1 Class: Bug fix Version: 1.6.0i1 Due to an inconsistent parameter format, the default parameters could not be displayed during discovery.

5 years, 4 months

Check_MK Werk 7344: Changing all setuid root binaries to use linux capabilities

by Lars Michelsen

ID: 7344 Title: Changing all setuid root binaries to use linux capabilities Component: Core & setup Level: 2 Class: Security fix Version: 1.6.0i1 In Linux there is the option to give a binary a SETUID bit. This bit gives the processes created by the binary all privileges of the binary file owner. There is also a more advanced concept called "linux capabilities" which makes it possible to give these processes only a specific set of permissions. In past versions Check_MK used SETUID root binaries in several places for different reasons. <ul> <li>check_dhcp / check_icmp: Active check plugins which need this permission to be able to open their raw sockets for sending and receiving their packets.</li> <li>bin/mkeventd_open514: Open SNMP trap or sylog ports for receiving messages.</li> <li>lib/cmc/icmpsender / lib/cmc/icmpreceiver: CEE/CME only: Open raw sockets for sending and receiving packets.</li> </ul> SETUID root binaries are problematic in terms of security, because they could be used for getting root privileges in case an attacker finds an attackable security flaw in them. Once exploited the attacker would gain full root access on the Check_MK system. Because all of these binaries need the privilege for a very specific known reason, we have now removed the SETUID bit from these binaries and are now setting individual linux capabilities to them. The capabilities have the advantage that they don't give full root access to the processes created with the binary. Instead they give only a defined set of permissions.

5 years, 4 months

Check_MK Werk 7345: Drop ancient scanparent_hosts configuration variable

by Lars Michelsen

ID: 7345 Title: Drop ancient scanparent_hosts configuration variable Component: Core & setup Level: 1 Class: Bug fix Version: 1.6.0i1 The undocumented configuration variable <tt>scanparent_hosts</tt> was removed from Check_MK base. In the unlikely case you have configured this variable for some reason, you will have to remove it from your configuration.

5 years, 4 months

Check_MK Werk 7457: Fixed filtering inventory tree by paths through web API

by Simon Betz

ID: 7457 Title: Fixed filtering inventory tree by paths through web API Component: HW/SW Inventory Level: 1 Class: Bug fix Version: 1.6.0i1

5 years, 4 months

Check_MK Werk 7296: oracle_dataguard_stats: Add missing metric definitions

by Florian Kromer

ID: 7296 Title: oracle_dataguard_stats: Add missing metric definitions Component: Checks & agents Level: 1 Class: Bug fix Version: 1.6.0i1 CMK-1768

5 years, 4 months

Check_MK Werk 7439: PagerDuty notification when Host Check Command queries a service

by Óscar Nájera

ID: 7439 Title: PagerDuty notification when Host Check Command queries a service Component: Notifications Level: 1 Class: Bug fix Version: 1.6.0i1 PagerDuty notification plugin tried to parse perfdata and include it on the Notification payload. This led to some buggy behavior on host problems when using a Host check command. Since this information is not Processed by PagerDuty only showed, we drop the perfdata information out of the notification. Also for consistency as other notification plugins don't include this information either.

5 years, 4 months

Check_MK Werk 7295: postgres_stats: Optional ignore of db table

by Florian Kromer

ID: 7295 Title: postgres_stats: Optional ignore of db table Component: Checks & agents Level: 1 Class: New feature Version: 1.6.0i1 This check plugin notifies about db tables which have never been analyzed or vacuumed with status according to the configuration in the WATO rule "PostgresSQL VACUUM and ANALYZE: Age of never analyzed/vacuumed tables". Users can now disable this rule, such that never analyzed or vacuumed tables are always {OK}.

5 years, 4 months

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

Checkmk werks level1 May 2019