| Commit message (Collapse) | Author | Age | Files | Lines |
| |
|
|
|
|
|
| |
Package-Manager: Portage-2.3.10, Repoman-2.3.3
RepoMan-Options: --include-arches="hppa"
|
|
|
|
| |
Package-Manager: Portage-2.3.10, Repoman-2.3.3
|
|
|
|
|
| |
Package-Manager: Portage-2.3.10, Repoman-2.3.3
RepoMan-Options: --include-arches="ppc"
|
|
|
|
|
| |
Package-Manager: Portage-2.3.10, Repoman-2.3.3
RepoMan-Options: --include-arches="ppc64"
|
|
|
|
|
| |
Package-Manager: Portage-2.3.8, Repoman-2.3.3
RepoMan-Options: --include-arches="sparc"
|
| |
|
|
|
|
|
|
|
|
|
|
|
| |
This new version comes with few upstream changes, but I took a flaming
sword to the ebuild. Upstream defaults to installing everything as
nagios:nagios, and this creates a few easy-to-exploit scenarios. The
ebuild will now install everything as root:root where I think we can
get away with it, but this is all an experiment. I'll mask this
version and ask for help testing.
Package-Manager: Portage-2.3.6, Repoman-2.3.1
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This new upstream version includes an OpenRC init script that makes
use of the build system for the nagios user and runtime paths. As a
result, we are able to drop the init/conf files that we've been using
in FILESDIR. The new version also writes its PID file before dropping
privileges, and combined with the new init script, that constitutes
a fix for CVE-2017-12847.
Gentoo-Bug: 621114
Package-Manager: Portage-2.3.6, Repoman-2.3.1
|
|
|
|
|
|
| |
Package-Manager: Portage-2.3.6, Repoman-2.3.2
Signed-off-by: Michael Orlitzky <mjo@gentoo.org>
|
|
|
|
|
|
| |
Package-Manager: Portage-2.3.6, Repoman-2.3.2
Signed-off-by: Michael Orlitzky <mjo@gentoo.org>
|
|
|
|
| |
Signed-off-by: Justin Lecher <jlec@gentoo.org>
|
|
|
|
|
|
| |
Gentoo-Bug: 585914
Package-Manager: Portage-2.3.3, Repoman-2.3.1
|
|
|
|
|
| |
Package-Manager: Portage-2.3.4, Repoman-2.3.2
RepoMan-Options: --ignore-arches
|
|
|
|
|
|
| |
Package-Manager: portage-2.3.3
RepoMan-Options: --include-arches="sparc"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
|
|
|
|
|
|
|
|
|
|
|
|
| |
Ebuild changes:
===============
- Cherry picked commit e03e4fd470 to stop nagios-core from flooding
syslog every 15 seconds due to debug leftovers [Upstream Issue #337].
Upstream Issue #337: https://github.com/NagiosEnterprises/nagioscore/issues/337
Acked-by: Michael Orlitzky <mjo@gentoo.org>
Package-Manager: Portage-2.3.3, Repoman-2.3.1
|
|
|
|
|
|
| |
Package-Manager: portage-2.3.3
RepoMan-Options: --include-arches="x86"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
|
|
|
|
|
|
| |
Package-Manager: portage-2.3.3
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
|
|
|
|
| |
Bug: 611234
|
|
|
|
| |
Signed-off-by: Robin H. Johnson <robbat2@gentoo.org>
|
|
|
|
| |
Gentoo-Bug: 585914
|
|
|
|
| |
Package-Manager: Portage-2.3.3, Repoman-2.3.1
|
|
|
|
|
|
| |
Gentoo-Bug: 585914
Package-Manager: Portage-2.3.3, Repoman-2.3.1
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
I tried removing the old versions of nagios to address a CVE, but
net-analyzer/pnp4nagios on three arches requires nagios-3.x. I've
filed a keyword request for icinga (which can also satisfy the
dependency), and after those keywords are added and everything is
stabilized we can try this again.
Gentoo-Bug: 602216
Gentoo-Bug: 605724
Package-Manager: portage-2.3.0
|
|
|
|
|
|
|
|
| |
With nagios-3.x (and older 4.x versions) removed from the tree, we now
have a bunch of unused files sitting in $FILESDIR. Get rid of them.
Gentoo-Bug: 602216
Package-Manager: portage-2.3.0
|
|
|
|
| |
Signed-off-by: Michael Orlitzky <mjo@gentoo.org>
|
|
|
|
|
|
| |
Gentoo-Bug: 602216
Package-Manager: portage-2.3.0
|
|
|
|
|
| |
Package-Manager: Portage-2.3.3, Repoman-2.3.1
RepoMan-Options: --ignore-arches
|
|
|
|
| |
Package-Manager: Portage-2.3.3, Repoman-2.3.1
|
|
|
|
|
|
| |
Package-Manager: portage-2.3.0
RepoMan-Options: --include-arches="ppc64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
|
|
|
|
|
|
| |
Package-Manager: portage-2.3.0
RepoMan-Options: --include-arches="ppc"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
|
|
|
|
|
|
| |
Package-Manager: portage-2.3.0
RepoMan-Options: --include-arches="sparc"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
|
|
|
|
|
|
| |
Package-Manager: portage-2.3.0
RepoMan-Options: --include-arches="x86"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
|
|
|
|
|
|
| |
Package-Manager: portage-2.3.0
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
|
|
|
|
| |
Gentoo-Bug: 602216
|
|
|
|
|
|
|
|
|
|
| |
We haven't heard from this package's proxy maintainer in a while, but
new bugs are still being assigned to him. As long as I'm the de-facto
maintainer, I would prefer that they be assigned to me. This commit
removes both the proxied and proxy maintainers, as well as the
proxy-maint project (who gave the OK for this removal).
Package-Manager: portage-2.3.0
|
|
|
|
|
|
| |
Gentoo-Bug: 602216
Package-Manager: portage-2.3.0
|
|
|
|
|
|
| |
Package-Manager: portage-2.3.0
RepoMan-Options: --include-arches="x86"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
|
|
|
|
|
|
| |
Package-Manager: portage-2.3.0
RepoMan-Options: --include-arches="amd64"
Signed-off-by: Agostino Sarubbo <ago@gentoo.org>
|
|
|
|
| |
Gentoo-Bug: 600864
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The new version 4.2.3 was added to fix CVE-2016-8641 in commit
c9f880e. However, the root privilege exploit results from the use of
"chown" in the init script. We don't use upstream's init script, so a
proper fix requires an update to our init script as well.
The following changes were made to the init script:
* We no longer attempt to delete the external command file before
starting or stopping the daemon. It's not clear why this was done,
and that file should not exist unless the user intentionally
creates it.
* We do not create or change ownership of /var/nagios/nagios.log or
/var/nagios/status.sav when starting the daemon. The log file path
is defined in the config file, so the hard-coded path in the init
script might not have referred to the true location of the log file.
And when the nagios daemon creates these files on its own, they
should already have the correct permissions and ownership. By
removing the "chown", we have actually fixed the root privilege
exploit in CVE-2016-8641.
* The two files /var/nagios/status.log and /var/nagios/nagios.tmp are
not deleted after the daemon has shut down. I can come up with no
compelling argument to do so.
Gentoo-Bug: 600864
Package-Manager: portage-2.3.0
|
|
|
|
|
|
| |
Gentoo-Bug: 600864
Package-Manager: portage-2.3.0
|
|
|
|
|
|
| |
ChangeLog entries."
This reverts commit 48b59c28052dbc9a1c410a8a5d93c1cc3c8c8d4b.
|
|
|
|
|
|
|
|
|
| |
ChangeLog entries.
This commit will be immediately reverted. The intention is to force the
mtime to be bumped causing the updated Manifest to be propagated to mirrors.
Gentoo-bug: 577722
|
|
|
|
| |
Package-Manager: portage-2.3.0
|
|
|
|
|
|
|
| |
Gentoo-Bug: 598104
Reported-By: Tomáš Mózes
Package-Manager: portage-2.3.0
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
This new version adds fixes for CVE-2008-4796 and CVE-2013-4214.
The ebuild itself was updated to EAPI=6. That required dropping the
depend.apache eclass, but that eclass was only used to define the
$APACHE2_MODULES_CONFDIR variable, and it was easily inlined. The
eutils and multilib eclasses were also dropped; the former because our
patches are now obsolete, and the latter because get_libdir() is in
EAPI=6.
Gentoo-Bug: 595194
Package-Manager: portage-2.2.28
|
|
|
|
|
|
| |
Gentoo-Bug: 532744
Package-Manager: portage-2.3.0_rc1
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
The fix for bug 388321 required a patch, but that patch broke the
installation of the theme logos (which live in their own
directory). That patch has been updated as a new revision,
use-INSTALL-to-install-themes-r1.patch, to avoid impacting
nagios-core-4.0.8-r2.ebuild which is stable on amd64. The new revision
nagios-4.1.1-r1 should pick up the new patch.
Gentoo-Bug: 388321
Gentoo-Bug: 581148
Package-Manager: portage-2.2.26
|