]> granicus.if.org Git - icinga2/log
icinga2
6 years agoLimit anonymous connections to 25
Jean Flach [Mon, 5 Mar 2018 12:22:43 +0000 (13:22 +0100)]
Limit anonymous connections to 25

6 years agoLimit JSON-RPC message size
Noah Hilverling [Thu, 1 Mar 2018 08:47:29 +0000 (09:47 +0100)]
Limit JSON-RPC message size

6 years agoMerge pull request #6135 from Icinga/fix/limit-api-package-size
Gunnar Beutner [Mon, 5 Mar 2018 12:24:09 +0000 (13:24 +0100)]
Merge pull request #6135 from Icinga/fix/limit-api-package-size

Limit JSON RPC message size

6 years agoLimit anonymous connections to 25 6135/head
Jean Flach [Mon, 5 Mar 2018 12:22:43 +0000 (13:22 +0100)]
Limit anonymous connections to 25

6 years agoLimit JSON-RPC message size
Noah Hilverling [Thu, 1 Mar 2018 08:47:29 +0000 (09:47 +0100)]
Limit JSON-RPC message size

6 years agoMerge pull request #6145 from gunnarbeutner/fix/incorrect-parameter-name
Gunnar Beutner [Mon, 5 Mar 2018 08:00:08 +0000 (09:00 +0100)]
Merge pull request #6145 from gunnarbeutner/fix/incorrect-parameter-name

Fix incorrect parameter name in the API documentation

6 years agoFix incorrect parameter name in the API documentation 6145/head
Gunnar Beutner [Mon, 5 Mar 2018 07:43:13 +0000 (08:43 +0100)]
Fix incorrect parameter name in the API documentation

fixes #6140

6 years agoMerge pull request #6139 from Icinga/itl/disk-docker-types
Gunnar Beutner [Mon, 5 Mar 2018 07:38:00 +0000 (08:38 +0100)]
Merge pull request #6139 from Icinga/itl/disk-docker-types

itl/disk: Ignore overlay and netfs filesystems

6 years agoitl: Ignore overlay and netfs filesystems 6139/head
Markus Frosch [Fri, 2 Mar 2018 11:44:08 +0000 (12:44 +0100)]
itl: Ignore overlay and netfs filesystems

Usually used by Docker and other containers and namespaces

6 years agoMerge pull request #6136 from Icinga/feature/counter-for-currently-running-concurrent...
Noah Hilverling [Thu, 1 Mar 2018 14:47:25 +0000 (15:47 +0100)]
Merge pull request #6136 from Icinga/feature/counter-for-currently-running-concurrent-checks-4939

Add counter for current concurrent checks to Icinga check

6 years agoClean up the Icinga plugins a bit 6058/head
Gunnar Beutner [Thu, 1 Feb 2018 07:45:09 +0000 (08:45 +0100)]
Clean up the Icinga plugins a bit

6 years agoAdd counter for current concurrent checks to Icinga check 6136/head
Noah Hilverling [Thu, 1 Mar 2018 14:01:47 +0000 (15:01 +0100)]
Add counter for current concurrent checks to Icinga check

fixes #4939

6 years agoClean up CORS implementation
Noah Hilverling [Mon, 12 Feb 2018 14:06:23 +0000 (15:06 +0100)]
Clean up CORS implementation

6 years agoFix incorrect HTTP content length limits
Gunnar Beutner [Wed, 28 Feb 2018 11:06:01 +0000 (12:06 +0100)]
Fix incorrect HTTP content length limits

6 years agoMerge pull request #6134 from gunnarbeutner/fix/incorrect-content-length-limits
Gunnar Beutner [Wed, 28 Feb 2018 13:16:15 +0000 (14:16 +0100)]
Merge pull request #6134 from gunnarbeutner/fix/incorrect-content-length-limits

Fix incorrect HTTP content length limits

6 years agoAdd SetCorked() calls to the JsonRpcConnection class
Gunnar Beutner [Wed, 28 Feb 2018 10:42:05 +0000 (11:42 +0100)]
Add SetCorked() calls to the JsonRpcConnection class

6 years agoUse cork in tlsstream and HTTP connection
Jean Flach [Tue, 27 Feb 2018 13:49:15 +0000 (14:49 +0100)]
Use cork in tlsstream and HTTP connection

6 years agoAdd cork
Jean Flach [Tue, 27 Feb 2018 13:48:37 +0000 (14:48 +0100)]
Add cork

6 years agoMerge pull request #6133 from Icinga/fix/cork-socket
Gunnar Beutner [Wed, 28 Feb 2018 11:48:06 +0000 (12:48 +0100)]
Merge pull request #6133 from Icinga/fix/cork-socket

Limit the number of HTTP/JSON-RPC requests we read in parallel

6 years agoFix incorrect HTTP content length limits 6134/head
Gunnar Beutner [Wed, 28 Feb 2018 11:06:01 +0000 (12:06 +0100)]
Fix incorrect HTTP content length limits

6 years agoMerge pull request #6116 from Icinga/fix/windows-service-restart
Gunnar Beutner [Wed, 28 Feb 2018 11:23:53 +0000 (12:23 +0100)]
Merge pull request #6116 from Icinga/fix/windows-service-restart

Fix Windows reload

6 years agoMerge pull request #6131 from Icinga/feature/log-master-ticket-invalid
Gunnar Beutner [Wed, 28 Feb 2018 11:22:34 +0000 (12:22 +0100)]
Merge pull request #6131 from Icinga/feature/log-master-ticket-invalid

Log which ticket was invalid on the master

6 years agoMerge pull request #6132 from gunnarbeutner/fix/http-parser-crash
Gunnar Beutner [Wed, 28 Feb 2018 11:21:09 +0000 (12:21 +0100)]
Merge pull request #6132 from gunnarbeutner/fix/http-parser-crash

Fix HTTP parser crash/hang

6 years agoFix null ptr dereference in HttpServerConnection::ProcessMessageAsync
Gunnar Beutner [Wed, 28 Feb 2018 10:07:19 +0000 (11:07 +0100)]
Fix null ptr dereference in HttpServerConnection::ProcessMessageAsync

6 years agoFix incorrect return value
Gunnar Beutner [Wed, 28 Feb 2018 09:50:33 +0000 (10:50 +0100)]
Fix incorrect return value

6 years agoAdd SetCorked() calls to the JsonRpcConnection class 6133/head
Gunnar Beutner [Wed, 28 Feb 2018 10:42:05 +0000 (11:42 +0100)]
Add SetCorked() calls to the JsonRpcConnection class

6 years agoUse cork in tlsstream and HTTP connection
Jean Flach [Tue, 27 Feb 2018 13:49:15 +0000 (14:49 +0100)]
Use cork in tlsstream and HTTP connection

6 years agoAdd cork
Jean Flach [Tue, 27 Feb 2018 13:48:37 +0000 (14:48 +0100)]
Add cork

6 years agoFix null ptr dereference in HttpServerConnection::ProcessMessageAsync 6132/head
Gunnar Beutner [Wed, 28 Feb 2018 10:07:19 +0000 (11:07 +0100)]
Fix null ptr dereference in HttpServerConnection::ProcessMessageAsync

6 years agoFix incorrect return value
Gunnar Beutner [Wed, 28 Feb 2018 09:50:33 +0000 (10:50 +0100)]
Fix incorrect return value

6 years agoLog which ticket was invalid on the master 6131/head
Michael Friedrich [Wed, 28 Feb 2018 09:18:29 +0000 (10:18 +0100)]
Log which ticket was invalid on the master

This helps debugging a lot, especially to reproduce the issue
why the ticket is invalid.

6 years agoMerge pull request #6128 from Icinga/fix/doc-adding-global-zones
Gunnar Beutner [Wed, 28 Feb 2018 08:46:45 +0000 (09:46 +0100)]
Merge pull request #6128 from Icinga/fix/doc-adding-global-zones

Adding documentation for configurable global zones during setup

6 years agoMerge pull request #6126 from Icinga/fix/require-systemd-libs
Gunnar Beutner [Wed, 28 Feb 2018 08:45:05 +0000 (09:45 +0100)]
Merge pull request #6126 from Icinga/fix/require-systemd-libs

Require systemd headers

6 years agoAdding documentation for configurable global zones during setup 6128/head
Michael Insel [Tue, 27 Feb 2018 20:22:29 +0000 (21:22 +0100)]
Adding documentation for configurable global zones during setup

This adds the documentation for the configurable global zones during the node wizard/setup.

refs #5767

6 years agoRequire systemd headers 6126/head
Jean Flach [Tue, 27 Feb 2018 14:54:58 +0000 (15:54 +0100)]
Require systemd headers

Only mandatory if using systemd

6 years agoMerge pull request #6125 from ekeih/fix/misleading-description-in-notification.conf...
Jean Flach [Tue, 27 Feb 2018 13:54:33 +0000 (14:54 +0100)]
Merge pull request #6125 from ekeih/fix/misleading-description-in-notification.conf-feature-file-6122

Fix description of the NotificationComponent in notification.conf

6 years agoFix description of the NotificationComponent in notification.conf, fix #6122 6125/head
Max Rosin [Tue, 27 Feb 2018 13:31:00 +0000 (14:31 +0100)]
Fix description of the NotificationComponent in notification.conf, fix #6122

6 years agofixup set rlimit stack failed condition 6119/head
lihan [Tue, 27 Feb 2018 04:56:36 +0000 (12:56 +0800)]
fixup set rlimit stack failed condition

6 years agoMerge pull request #6050 from gunnarbeutner/feature/remove-boost-split
Gunnar Beutner [Mon, 26 Feb 2018 07:37:46 +0000 (08:37 +0100)]
Merge pull request #6050 from gunnarbeutner/feature/remove-boost-split

Replace boost::algorithm::split calls with String::Split

6 years agoUse std::vector<std::string> for command-line arguments
Gunnar Beutner [Mon, 26 Feb 2018 07:34:45 +0000 (08:34 +0100)]
Use std::vector<std::string> for command-line arguments

6 years agoImplement ability to make global zones configurable
Michael [Wed, 15 Nov 2017 17:42:29 +0000 (18:42 +0100)]
Implement ability to make global zones configurable

This adds the ability to make global zones configurable during the node
wizard/setup. The implementation will add the given global zones to the default
included global zones.

6 years agoMerge pull request #6051 from gunnarbeutner/feature/icingaloader-cmake-folder
Gunnar Beutner [Mon, 26 Feb 2018 07:27:41 +0000 (08:27 +0100)]
Merge pull request #6051 from gunnarbeutner/feature/icingaloader-cmake-folder

Set FOLDER cmake property for the icingaloader target

6 years agoReplace boost::algorithm::split calls with String::Split 6050/head
Gunnar Beutner [Thu, 1 Feb 2018 07:07:30 +0000 (08:07 +0100)]
Replace boost::algorithm::split calls with String::Split

6 years agoMerge pull request #6107 from MichalMMac/master
Gunnar Beutner [Mon, 26 Feb 2018 07:09:35 +0000 (08:09 +0100)]
Merge pull request #6107 from MichalMMac/master

Allow MYSQL_LIB to be specified by ENV variable

6 years agoFix Windows reload 6116/head
Jean Flach [Fri, 23 Feb 2018 16:01:46 +0000 (17:01 +0100)]
Fix Windows reload

6 years agoFix incorrect size of request limits
Jean Flach [Fri, 23 Feb 2018 13:29:18 +0000 (14:29 +0100)]
Fix incorrect size of request limits

refs #6103

6 years agoFix typo in prepare-dirs
Jean Flach [Fri, 23 Feb 2018 12:25:59 +0000 (13:25 +0100)]
Fix typo in prepare-dirs

refs #5850

6 years agoMerge pull request #6115 from Icinga/ineedmorebranches
Jean Flach [Fri, 23 Feb 2018 13:42:25 +0000 (14:42 +0100)]
Merge pull request #6115 from Icinga/ineedmorebranches

Fix incorrect size of request limits

6 years agoMerge pull request #6114 from Icinga/whycantipushintomasteragain
Jean Flach [Fri, 23 Feb 2018 13:42:15 +0000 (14:42 +0100)]
Merge pull request #6114 from Icinga/whycantipushintomasteragain

Fix typo in prepare-dirs

6 years agoFix incorrect size of request limits 6115/head
Jean Flach [Fri, 23 Feb 2018 13:29:18 +0000 (14:29 +0100)]
Fix incorrect size of request limits

refs #6103

6 years agoFix typo in prepare-dirs 6114/head
Jean Flach [Fri, 23 Feb 2018 12:25:59 +0000 (13:25 +0100)]
Fix typo in prepare-dirs

refs #5850

6 years agoRemove need for init.conf
Jean Flach [Mon, 29 Jan 2018 13:23:53 +0000 (14:23 +0100)]
Remove need for init.conf

6 years agoRemove need for RunAsUser/Group
Jean Flach [Fri, 26 Jan 2018 15:27:16 +0000 (16:27 +0100)]
Remove need for RunAsUser/Group

They are now read form the sysconfig file which is owned by root

6 years agoAdd cli tool to send signals as Icinga user
Jean Flach [Wed, 17 Jan 2018 12:26:19 +0000 (13:26 +0100)]
Add cli tool to send signals as Icinga user

fixes #5991

6 years agoGet ICINGA2_USER and GROUP from sysconfig
Jean Flach [Wed, 17 Jan 2018 12:25:40 +0000 (13:25 +0100)]
Get ICINGA2_USER and GROUP from sysconfig

6 years agoFix prepare-dirs permission exploit
Jean Flach [Wed, 29 Nov 2017 12:56:10 +0000 (13:56 +0100)]
Fix prepare-dirs permission exploit

refs #5793

6 years agoAdd clarification on sysconfig location
Jean Flach [Thu, 22 Feb 2018 11:31:36 +0000 (12:31 +0100)]
Add clarification on sysconfig location

6 years agoAdd Upgrading to Icinga 2.8.2 chapter
Jean Flach [Thu, 22 Feb 2018 10:29:12 +0000 (11:29 +0100)]
Add Upgrading to Icinga 2.8.2 chapter

6 years agoRemove debug output in ApiUserCommand::Run
Gunnar Beutner [Thu, 15 Feb 2018 14:49:23 +0000 (15:49 +0100)]
Remove debug output in ApiUserCommand::Run

6 years agoProperly escape strings in ApiUserCommand::Run
Gunnar Beutner [Thu, 15 Feb 2018 14:48:53 +0000 (15:48 +0100)]
Properly escape strings in ApiUserCommand::Run

6 years agoImprove api user command
Jean Flach [Fri, 22 Dec 2017 12:01:51 +0000 (13:01 +0100)]
Improve api user command

--oneline can now be used to print out only the password hash string.
This can be used to update ApiUser passwords through the API. There is
also now a validation to make use salt does not contain a '$' which
would break verification.

6 years agoFix crash when using incorrectly formatted password hash
Jean Flach [Fri, 22 Dec 2017 11:58:39 +0000 (12:58 +0100)]
Fix crash when using incorrectly formatted password hash

6 years agoMove new password functions into tlsutility
Jean Flach [Fri, 22 Dec 2017 11:14:31 +0000 (12:14 +0100)]
Move new password functions into tlsutility

6 years agoHash API password and comparison
Jean Flach [Fri, 11 Aug 2017 14:23:24 +0000 (16:23 +0200)]
Hash API password and comparison

fixes #4920

6 years agoBuild/Merge fixes
Jean Flach [Fri, 23 Feb 2018 09:27:55 +0000 (10:27 +0100)]
Build/Merge fixes

6 years agoMinor codestyle and doc changes
Jean Flach [Wed, 21 Feb 2018 12:22:17 +0000 (13:22 +0100)]
Minor codestyle and doc changes

6 years agoLimit HTTP body size
Noah Hilverling [Mon, 19 Feb 2018 12:33:58 +0000 (13:33 +0100)]
Limit HTTP body size

6 years agoFix requests not being closed correctly
Noah Hilverling [Mon, 19 Feb 2018 09:47:14 +0000 (10:47 +0100)]
Fix requests not being closed correctly

6 years agoAdd timeout for TLS handshakes
Jean Flach [Tue, 13 Feb 2018 16:29:48 +0000 (17:29 +0100)]
Add timeout for TLS handshakes

6 years agoAuthenticate API user before parsing body
Jean Flach [Thu, 8 Feb 2018 13:54:52 +0000 (14:54 +0100)]
Authenticate API user before parsing body

6 years agoOnly read body from authenticated connections
Jean Flach [Thu, 1 Feb 2018 14:10:28 +0000 (15:10 +0100)]
Only read body from authenticated connections

This means we are not allowing unauthenticated requests anymore

6 years agoFix nullptr deref
Jean Flach [Tue, 30 Jan 2018 12:34:26 +0000 (13:34 +0100)]
Fix nullptr deref

6 years agoAdd HTTP Header size limits
Gunnar Beutner [Wed, 31 Jan 2018 08:05:06 +0000 (09:05 +0100)]
Add HTTP Header size limits

6 years agoAdd validation for HTTP connection sizes
Gunnar Beutner [Wed, 31 Jan 2018 06:59:49 +0000 (07:59 +0100)]
Add validation for HTTP connection sizes

6 years agoMerge pull request #6111 from Icinga/upgrading-icinga2-docs
Jean Flach [Thu, 22 Feb 2018 14:10:28 +0000 (15:10 +0100)]
Merge pull request #6111 from Icinga/upgrading-icinga2-docs

Add Upgrading to Icinga 2.8.2 chapter

6 years agoSELinux: Allows icinga2_t to send sigkill to all domains it transitions to
Dirk Goetz [Mon, 15 Jan 2018 14:05:09 +0000 (15:05 +0100)]
SELinux: Allows icinga2_t to send sigkill to all domains it transitions to

Fixes #5916

6 years agoRename macro RequireNotNull to REQUIRE_NOT_NULL
Jean Flach [Wed, 21 Feb 2018 12:42:58 +0000 (13:42 +0100)]
Rename macro RequireNotNull to REQUIRE_NOT_NULL

6 years agoFix nullptr deref in cluster events
Noah Hilverling [Wed, 31 Jan 2018 09:17:49 +0000 (10:17 +0100)]
Fix nullptr deref in cluster events

6 years agoAdd marco RequireNotNull
Noah Hilverling [Tue, 30 Jan 2018 10:26:07 +0000 (11:26 +0100)]
Add marco RequireNotNull

This is used to fix a number of possible nullptr dereferences

6 years agoMerge pull request #6113 from Icinga/testing/appveyor
Gunnar Beutner [Thu, 22 Feb 2018 13:38:55 +0000 (14:38 +0100)]
Merge pull request #6113 from Icinga/testing/appveyor

appveyor: Disable artifacts until we use them

6 years agoappveyor: Disable artifacts until we use them 6113/head
Markus Frosch [Thu, 22 Feb 2018 13:25:53 +0000 (14:25 +0100)]
appveyor: Disable artifacts until we use them

fixes #6106

6 years agoAdd clarification on sysconfig location 6111/head
Jean Flach [Thu, 22 Feb 2018 11:31:36 +0000 (12:31 +0100)]
Add clarification on sysconfig location

6 years agoAdd Upgrading to Icinga 2.8.2 chapter
Jean Flach [Thu, 22 Feb 2018 10:29:12 +0000 (11:29 +0100)]
Add Upgrading to Icinga 2.8.2 chapter

6 years agoMerge branch 'feature/security-features'
Jean Flach [Wed, 21 Feb 2018 15:19:54 +0000 (16:19 +0100)]
Merge branch 'feature/security-features'

6 years agoMerge pull request #6109 from Icinga/feature/used-memory
Jean Flach [Wed, 21 Feb 2018 14:48:37 +0000 (15:48 +0100)]
Merge pull request #6109 from Icinga/feature/used-memory

Add 'used' feature to check_memory

6 years agoFix code style 6109/head
Noah Hilverling [Wed, 21 Feb 2018 14:13:50 +0000 (15:13 +0100)]
Fix code style

6 years agoAdd 'used' feature to check_memory
Jean Flach [Wed, 21 Feb 2018 13:59:21 +0000 (14:59 +0100)]
Add 'used' feature to check_memory

Analogous to check_disk -U can now be used to check against and print the
used memory instead of the default available memory.

fixes #6108

6 years agoMerge pull request #6103 from Icinga/fix/http-security-fixes
Jean Flach [Wed, 21 Feb 2018 14:04:02 +0000 (15:04 +0100)]
Merge pull request #6103 from Icinga/fix/http-security-fixes

HTTP Security fixes

6 years agoMinor codestyle and doc changes 6103/head
Jean Flach [Wed, 21 Feb 2018 12:22:17 +0000 (13:22 +0100)]
Minor codestyle and doc changes

6 years agoUpdate docs 5715/head
Jean Flach [Wed, 21 Feb 2018 13:40:22 +0000 (14:40 +0100)]
Update docs

6 years agoMerge pull request #6104 from Icinga/fix/nullptr-deref
Jean Flach [Wed, 21 Feb 2018 12:56:09 +0000 (13:56 +0100)]
Merge pull request #6104 from Icinga/fix/nullptr-deref

Fix nullptr dereferences

6 years agoRename macro RequireNotNull to REQUIRE_NOT_NULL 6104/head
Jean Flach [Wed, 21 Feb 2018 12:42:58 +0000 (13:42 +0100)]
Rename macro RequireNotNull to REQUIRE_NOT_NULL

6 years agoFix nullptr posibility in ProcessEvent
Noah Hilverling [Wed, 7 Feb 2018 13:24:06 +0000 (14:24 +0100)]
Fix nullptr posibility in ProcessEvent

6 years agoFix nullptr deref in cluster events
Noah Hilverling [Wed, 31 Jan 2018 09:17:49 +0000 (10:17 +0100)]
Fix nullptr deref in cluster events

6 years agoAdd marco RequireNotNull
Noah Hilverling [Tue, 30 Jan 2018 10:26:07 +0000 (11:26 +0100)]
Add marco RequireNotNull

This is used to fix a number of possible nullptr dereferences

6 years agoMerge pull request #5850 from Icinga/fix/prepare-dirs-5793
Jean Flach [Wed, 21 Feb 2018 12:02:40 +0000 (13:02 +0100)]
Merge pull request #5850 from Icinga/fix/prepare-dirs-5793

init script security fixes

6 years agoAllow MYSQL_LIB to be specified by ENV variable 6107/head
Michal Moravec [Wed, 21 Feb 2018 09:49:53 +0000 (10:49 +0100)]
Allow MYSQL_LIB to be specified by ENV variable

6 years agoMerge pull request #6101 from Icinga/fix/doc-operators-missing-word
Jean Flach [Wed, 21 Feb 2018 08:54:52 +0000 (09:54 +0100)]
Merge pull request #6101 from Icinga/fix/doc-operators-missing-word

Add missing word in operator documentation

6 years agoAdd missing word in operator documentation 6101/head
Michael Insel [Mon, 19 Feb 2018 21:08:18 +0000 (22:08 +0100)]
Add missing word in operator documentation

This adds the missing word `sorted` to the operators documentation.

6 years agoRemove need for init.conf 5850/head
Jean Flach [Mon, 29 Jan 2018 13:23:53 +0000 (14:23 +0100)]
Remove need for init.conf