30 Commits

Author SHA1 Message Date
sthen
32356d0c7f Switch NRPE to openssl; libressl no longer supports 512 bit DH keys.
Add a no_ssl flavour to allow a non-SSL build (SSL doesn't really add
much in the case of NRPE as no authentication is done anyway).

guenther@ provided a diff to stay with libressl and use auto dh support
instead, but backwards compatibility is a problem there.
2015-03-23 09:16:55 +00:00
jca
10dea71a20 Prevent the nrpe children from cleaning up the pidfile on
accept(2)/getpeername(2) errors, from Ubuntu.  ok sthen@
2014-07-22 08:55:45 +00:00
sthen
d384627d53 handle monitoring-plugins shuffling 2014-07-11 20:08:23 +00:00
sthen
1b970b221d Remove the config option that allows the setting command arguments over
the network. If somebody can't change their config to do what they need
without allowing them to be specified, they can rebuild it themselves
and take responsibility for their own actions.

One specific case this is often used is to check disk space. Note that
you don't need to set a specific partition for check_disk, running it without
a -p flag will check all the filesystems.
2014-04-21 10:28:31 +00:00
sthen
e54156760e Filter more unsafe chars for popen() (only affects installations where
"dont_blame_nrpe" has been set, which you should not do).

From http://seclists.org/fulldisclosure/2014/Apr/240 / oss-sec
2014-04-18 11:33:41 +00:00
sthen
249777d02c bump; nagios-plugins -> monitoring-plugins 2014-04-07 12:32:23 +00:00
sthen
70d11fd622 disable tcp wrappers 2014-03-23 21:07:10 +00:00
sthen
6901833549 update to nrpe 2.15, adding IPv6 support (and yes, it still listens on v4. ;) 2013-09-17 21:22:26 +00:00
ajacoutot
8613536758 Some trivial WANTLIB and tweaks to unbreak after the Heimdal update.
Stop hardcoding the Kerberos libs and use krb5-config(1).
2013-06-17 19:28:36 +00:00
sthen
cf80c9cf32 switch back to the nagios version of NRPE and update to 2.14, including
fix for metacharacter filtering (CVE-2013-1362) which was letting $(...)
through, reported by a couple of people.

this loses the v6 support but the fork which added this is currently dead.
2013-04-17 15:15:16 +00:00
espie
eae66e4a7b PERMIT_* / REGRESS->TEST sweep 2013-03-11 11:35:43 +00:00
sthen
b700bc9042 cvs add. I could've sworn this was already there... 2012-09-05 19:57:42 +00:00
sthen
ebfd5e5feb use a subdir for the pid file to avoid log spam; pointed out by Julien Dhaille 2012-09-05 19:55:57 +00:00
sthen
91faa22c52 Where a program with an rc script _requires_ a certain command line
parameter to daemonize, move the parameter from daemon to daemon_flags,
so that the user cannot inadvertently prevent it from daemonizing by
adjusting the flags.

Discussed with ajacoutot and schwarze, this method was suggested
by schwarze@ as a simpler alternative to my diff. ok aja@
2011-12-17 22:01:12 +00:00
espie
d0fa01c846 normalize pkgpath 2011-09-16 11:13:37 +00:00
sthen
5394819523 - switch to Icinga's fork of nrpe (it hasn't changed much; mostly auto*
changes and v6 support)

- remove unnecessary /dev/*random patch

- force libwrap detection via autoconf variables, it's less intrusive
than patching configure
2011-04-21 11:23:38 +00:00
sthen
84291d928e add an rc script for nrpe; ok ajacoutot@ 2011-01-20 14:04:42 +00:00
espie
0397d65db0 new depends 2010-11-19 22:31:32 +00:00
sthen
cad99f0e35 use REVISION. 2010-07-13 21:08:00 +00:00
sturm
4ec405ebe2 follow henning on nagios:
need to set pfd.events, not revents... d'oh. Tamas TEVESZ <ice@extreme.hu>
2009-01-10 16:56:42 +00:00
sturm
36a6d24579 adapt henning's nagios diff, to fix reading of nonblocking sockets
ok sthen
2009-01-09 18:40:14 +00:00
sthen
abb85a5553 update to 2.12 and take MAINTAINER.
ok david@ (previous maintainer).
2008-11-13 08:33:16 +00:00
merdely
241b722760 Remove surrounding quotes in COMMENT*/PERMIT_*/BROKEN/ERRORS
Add $OpenBSD$ to p5-SNMP-Info/Makefile (ok kili@, simon@)
2007-09-15 22:36:51 +00:00
sturm
6919b1d57c update to nrpe 2.7.1
ok david@ (maintainer)
2007-09-06 19:09:10 +00:00
espie
9eafbbfb35 base64 checksums. 2007-04-05 16:19:55 +00:00
espie
b75dec414c fix a few obviously wrong dependencies, and remove extra shells in ghc. 2006-11-20 13:07:19 +00:00
david
a9fd139c64 update to nrpe-2.5.2; ok aanriot@ 2006-07-20 05:00:24 +00:00
aanriot
8e6f0bbddb maintenance update to 2.5.1 .
ok david@
2006-05-21 19:16:34 +00:00
david
0d9ebcb32c update to nrpe-2.5 2006-04-12 21:06:10 +00:00
david
073f232890 initial import of nrpe-2.3 (Nagios Remote Plugin Executor)
NRPE is an addon for Nagios that allows you to execute "local" plugins
(like check_disk, check_procs, etc.) on remote hosts. The check_nrpe
plugin is called from Nagios and makes plugin execution requests to the
NRPE daemon running on the remote host (either as a standalone daemon
or as a service under inetd). Supports passing command arguments to
server, as well as native SSL/TLS encryption (anonymous DH mode).

help/ok sturm@ bernd@
2006-02-04 13:16:08 +00:00