From checkmk-werks-lvl1@lists.checkmk.com Sat Apr  6 12:49:56 2024
From: Checkmk werks level 1 <checkmk-werks-lvl1@lists.checkmk.com>
To: checkmk-werks-lvl1@lists.checkmk.com
Subject: [2.2.0] Checkmk Werk 15843 created: mk_oracle(ps1): Follow-up to
 privilege escalation fix
Date: Sat, 06 Apr 2024 12:49:54 +0000
Message-ID: <1712407794.109805.305.nullmailer@localhost>
MIME-Version: 1.0
Content-Type: multipart/mixed; boundary="===============8411485363356704469=="

--===============8411485363356704469==
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: quoted-printable

Title: mk_oracle(ps1): Follow-up to privilege escalation fix
Class: fix
Compatible: incomp
Component: checks
Date: 1712314947
Edition: cre
Level: 2
Version: 2.2.0p25

You might be affected by this Werk if you use <tt>mk_oracle</tt> on Windows.

Werk <a href=3D"https://checkmk.com/werk/16232">Werk #16232</a> introduced a =

regression, thereby disrupting Oracle monitoring on Windows.

This Werk addresses above mentioned issue that affects versions 2.1.0p41,=20
2.2.0p24, and 2.3.0b4.

Since this release, Oracle monitoring on Windows is fully supported under=20
condition you use an account without administrator rights or the certain=20
executable binaries, <tt>sqlplus.exe</tt>, <tt>tnsping.exe</tt> and, if=20
presented, <tt>crsctl.exe</tt> are write-protected, with the possible=20
exception being the Administrator.

If you are unable or prefer not to use an unprivileged account then you may=20
need to adjust permissions for above mentioned binaries: remove <tt>Write</tt=
>,=20
<tt>Full Control</tt> and <tt>Modify</tt> permissions for any non-Administrat=
or=20
user and group.

More information about can be found at <a href=3D"https://checkmk.atlassian.n=
et/wiki/x/AQA1B">here</a>.


--===============8411485363356704469==--