From checkmk-werks-lvl1@lists.checkmk.com Wed May 29 14:54:03 2024 From: Checkmk werks level 1 To: checkmk-werks-lvl1@lists.checkmk.com Subject: [2.3.0] Checkmk Werk 15843 adapted: mk_oracle(ps1): Follow-up to privilege escalation fix Date: Wed, 29 May 2024 14:53:57 +0000 Message-ID: <1716994437.374870.13495.nullmailer@localhost> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============2107453090242208578==" --===============2107453090242208578== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Werk 15843 was adapted. The following is the new Werk, a diff is shown at the= end of the message. [//]: # (werk v2) # mk_oracle(ps1): Follow-up to privilege escalation fix key | value ---------- | --- compatible | no version | 2.3.0b4 date | 2024-04-05T11:02:27+00:00 level | 2 class | fix component | checks edition | cre You might be affected by this Werk if you use mk_oracle on Windows. Werk Werk #16232 introduced a = regression, thereby disrupting Oracle monitoring on Windows. This Werk addresses above mentioned issue that affects versions 2.1.0p41,=20 2.2.0p24, and 2.3.0b4. Since this release, Oracle monitoring on Windows is fully supported under=20 condition you use an account without administrator rights or the certain=20 executable binaries, sqlplus.exe, tnsping.exe and, if=20 presented, crsctl.exe are write-protected, with the possible=20 exception being the Administrator. If you are unable or prefer not to use an unprivileged account then you may=20 need to adjust permissions for above mentioned binaries: remove Write,=20 Full Control and Modify permissions for any non-Administrat= or=20 user and group. More information about can be found at here. -----------------------------------------------------------------------= -------- [//]: # (werk v2) # mk_oracle(ps1): Follow-up to privilege escalation fix =20 key | value ---------- | --- compatible | no - version | 2.3.0b5 ? ^ + version | 2.3.0b4 ? ^ date | 2024-04-05T11:02:27+00:00 level | 2 class | fix component | checks edition | cre =20 You might be affected by this Werk if you use mk_oracle on Windows. =20 Werk Werk #16232 introduced = a=20 regression, thereby disrupting Oracle monitoring on Windows. =20 This Werk addresses above mentioned issue that affects versions 2.1.0p41,=20 2.2.0p24, and 2.3.0b4. =20 Since this release, Oracle monitoring on Windows is fully supported under=20 condition you use an account without administrator rights or the certain=20 executable binaries, sqlplus.exe, tnsping.exe and, if=20 presented, crsctl.exe are write-protected, with the possible=20 exception being the Administrator. =20 If you are unable or prefer not to use an unprivileged account then you may= =20 need to adjust permissions for above mentioned binaries: remove Write,=20 Full Control and Modify permissions for any non-Administr= ator=20 user and group. =20 More information about can be found at here. --===============2107453090242208578==--