disable unity build (upstream default) everywhere, it was previously disabled on
!amd64, but the large c++ files involved are bringing my amd64 workstation to its
knees with long hangs making X unusable for many minutes at a time
security fixes (also affecting nagios; icinga 1.x is the old nagios-derived
branch, whereas 2.x is all new) -
* Bug #13709: CVE-2016-9566: Root priviledge escalation during log file opening
* Bug #10453: Icinga Classic-UI 1.13.3 and older are vulnerable to XSS - CVE-2015-8010
notable changes -
* Classic UI: Remove attribute based authorization (cgiauth.cfg is not parsed
any more)
* IDO: Remove deprecated config options
a skeleton conversion rather than something ready-to-run, and it's less work
to write a new config using the full scope of the config language than to fix
up a migrated one.
`.gnu.linkonce.t._ZN6icinga5ValueC1EPNS_6ObjectE' referenced in section `.gnu.linkonce.r._ZN6icinga5ValueC1EPNS_6ObjectE' of lib/base/CMakeFiles/base.dir/boolean-script.cpp.o: defined in discarded section `.gnu.linkonce.t._ZN6icinga5ValueC1EPNS_6ObjectE' of lib/base/CMakeFiles/base.dir/boolean-script.cpp.o
mismatch between chrooted and non-chrooted paths (there are both CLI
scripts and a web app; both need to refer to the same paths and as well
as being complicated, the patches weren't quite working correctly,
as noticed by sebastia@).
Now you must setup a symlink "/var/www/var/www -> .." instead as
described in the new version of the pkg-readme, allowing icingaweb2 to
always use /var/www paths whether inside or outside the jail.
Note: Existing users of this package will need to create that symlink too.
check for "make test"); in some occasions if devel/libconfig is installed at
build time it can cause the wrong libconfig to be picked up, resulting in
build failures. Add a pseudo-flavour to enable them if needed.
(I didn't run into this myself but, as found by ajacoutot@, in some builds
CMake decides to list -L/usr/local/lib before -L${WRKBUILD}/Bin/Release).
or client certificates for:
- filters, types, permissions
- query/create/modify/delete config objects at runtime
- status queries for global stats
- actions (e.g. acknowledge all service problems)
- event streams
- patch constants.conf to use /var/www/var/run/icinga2 as default RunDir
- modify startup script to create above RunDir and symlink into /var/run/icinga2
open()s in other threads, fixing an issue where the daemon doesn't start
correctly when the command listener is enabled.
Many thanks to dnsmichi and gunnarbeutner from Icinga for tracking this
down and fixing it.
