Commit Graph

9484 Commits

Author SHA1 Message Date
Noah Hilverling e9643467a0
Fix code style 2018-02-21 15:13:50 +01:00
Jean Flach de9adb2687 Add 'used' feature to check_memory
Analogous to check_disk -U can now be used to check against and print the
used memory instead of the default available memory.

fixes #6108
2018-02-21 15:10:26 +01:00
Jean Flach 184580f705
Merge pull request #6103 from Icinga/fix/http-security-fixes
HTTP Security fixes
2018-02-21 15:04:02 +01:00
Jean Flach 85f45d9b94 Minor codestyle and doc changes 2018-02-21 14:52:44 +01:00
Jean Flach fae7f172db Update docs 2018-02-21 14:40:22 +01:00
Jean Flach eda9bce8cb
Merge pull request #6104 from Icinga/fix/nullptr-deref
Fix nullptr dereferences
2018-02-21 13:56:09 +01:00
Jean Flach a71ab1e126 Rename macro RequireNotNull to REQUIRE_NOT_NULL 2018-02-21 13:47:46 +01:00
Noah Hilverling 64ffe4f840 Fix nullptr posibility in ProcessEvent 2018-02-21 13:47:46 +01:00
Noah Hilverling 948333225d Fix nullptr deref in cluster events 2018-02-21 13:47:46 +01:00
Noah Hilverling 6bebdf8a87 Add marco RequireNotNull
This is used to fix a number of possible nullptr dereferences
2018-02-21 13:47:46 +01:00
Jean Flach aea43ddeb9
Merge pull request #5850 from Icinga/fix/prepare-dirs-5793
init script security fixes
2018-02-21 13:02:40 +01:00
Michal Moravec bf909ce47f Allow MYSQL_LIB to be specified by ENV variable 2018-02-21 10:49:53 +01:00
Jean Flach 636ed8e238
Merge pull request #6101 from Icinga/fix/doc-operators-missing-word
Add missing word in operator documentation
2018-02-21 09:54:52 +01:00
Michael Insel 60962c0897 Add missing word in operator documentation
This adds the missing word `sorted` to the operators documentation.
2018-02-20 17:28:08 +01:00
Jean Flach 87adc88989 Remove need for init.conf 2018-02-20 14:16:43 +01:00
Jean Flach c8c193a9d8 Remove need for RunAsUser/Group
They are now read form the sysconfig file which is owned by root
2018-02-20 14:16:43 +01:00
Jean Flach 6ae376b7fd Add cli tool to send signals as Icinga user
fixes #5991
2018-02-20 14:16:43 +01:00
Jean Flach ba41d7f249 Get ICINGA2_USER and GROUP from sysconfig 2018-02-20 14:16:43 +01:00
Jean Flach 88f77f9f8d Fix prepare-dirs permission exploit
refs #5793
2018-02-20 14:16:43 +01:00
Dirk Goetz bef37a3051 SELinux: Add InfluxDB as example for services requiring `icinga2_can_connect_all`.
Fixes #5915
2018-02-20 14:16:43 +01:00
Dirk Goetz 87f8ca5b79 Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification
Refs #5540
2018-02-20 14:16:43 +01:00
Noah Hilverling 2823ebb831 Limit HTTP body size 2018-02-20 13:32:04 +01:00
Noah Hilverling 817415f6a5 Fix requests not being closed correctly 2018-02-20 13:32:04 +01:00
Jean Flach 8ffa4f04a7 Add timeout for TLS handshakes 2018-02-20 13:32:04 +01:00
Jean Flach ee5954726d Authenticate API user before parsing body 2018-02-20 13:32:04 +01:00
Jean Flach 73b85bcccb Only read body from authenticated connections
This means we are not allowing unauthenticated requests anymore
2018-02-20 13:32:04 +01:00
Jean Flach 81c4004894 Fix nullptr deref 2018-02-20 13:32:04 +01:00
Gunnar Beutner a9f2a8de19 Add HTTP Header size limits 2018-02-20 13:32:04 +01:00
Gunnar Beutner 2789d1a859 Add validation for HTTP connection sizes 2018-02-20 13:32:04 +01:00
Jean Flach 7bb8192f4e
Merge pull request #6102 from Icinga/fix/doc-typo-apply-for
Fix typo in Apply for Rules documentation
2018-02-20 11:08:06 +01:00
Jean Flach 54384528ed Fix crash in api user command 2018-02-20 09:45:55 +01:00
Michael Insel 3b47d201c2 Fix typo in Apply for Rules documentation
fixes 6100
2018-02-19 22:11:12 +01:00
Gunnar Beutner 8a8d42b154 Remove redundant 'this->' 2018-02-19 08:08:16 +01:00
Jean Flach 0a0795f09d Code style 2018-02-16 11:47:13 +01:00
Gunnar Beutner 6e3347b5bf Remove debug output in ApiUserCommand::Run 2018-02-16 11:46:43 +01:00
Gunnar Beutner f4403daef8 Properly escape strings in ApiUserCommand::Run 2018-02-16 11:46:43 +01:00
Jean Flach c7ae986d94
Merge pull request #5981 from dgoetz/fix/selinux-influxdb
SELinux: Add InfluxDB as example for services requiring `icinga2_can_connect_all`.
2018-02-15 14:30:36 +01:00
Jean Flach 2bd35aa357 Improve api user command
--oneline can now be used to print out only the password hash string.
This can be used to update ApiUser passwords through the API. There is
also now a validation to make use salt does not contain a '$' which
would break verification.
2018-02-15 13:09:22 +01:00
Jean Flach df86245fe8 Fix crash when using incorrectly formatted password hash 2018-02-15 13:09:22 +01:00
Jean Flach 65a806f5dc Move new password functions into tlsutility 2018-02-15 13:09:22 +01:00
Jean Flach 92e2faaa08 Hash API password and comparison
fixes #4920
2018-02-15 13:09:22 +01:00
Gunnar Beutner 34a046cd00
Merge pull request #6090 from dgoetz/fix/notification-urlencoding
Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification
2018-02-15 10:46:27 +01:00
Dirk Goetz 9b9c5120cb Fixed URL encoding for HOSTNAME and SERVICENAME in mail notification
Refs #5540
2018-02-14 15:41:54 +01:00
Michael Friedrich 6f7739b1cb Docs: Fix bracket in notification example
refs #6089
2018-02-14 13:06:41 +01:00
Michael Friedrich f3e747509c
Merge pull request #6089 from Icinga/fix/docs-notification-example
Docs: Fix bracket in notification example
2018-02-14 13:06:08 +01:00
Michael Friedrich 59494d868a Docs: Fix bracket in notification example 2018-02-14 13:04:42 +01:00
Dirk Goetz aff6b11421 SELinux: Add InfluxDB as example for services requiring `icinga2_can_connect_all`.
Fixes #5915
2018-02-14 11:33:15 +01:00
Gunnar Beutner 23d69c9e4e
Merge pull request #6067 from Icinga/feature/windows-appveyor
Improve Windows builds and testing
2018-02-13 08:11:10 +01:00
Michael Friedrich 2fee533b32 Upgrading: Make it more clear that the Director script is just an example
refs #6086
2018-02-12 13:44:56 +01:00
Michael Friedrich e8b4f53466
Merge pull request #6086 from Icinga/fix/doc-upgrading-cert-migration-example
Upgrading: Make it more clear that the Director script is just an example
2018-02-12 13:44:30 +01:00