Check_MK Werk 1373: Do not ouput complete command line when datasource programs fail

Mathias Kettner mk at mathias-kettner.de
Thu Aug 21 13:12:55 CEST 2014


ID:          1373
Title:       Do not ouput complete command line when datasource programs fail
Component:   Core & Setup
Level:       2
Class:       Security Fix
Version:     1.2.5i6

When executing a datasource program like <tt>agent_vsphere</tt>
fails, then Check_MK used to output the complete command line
as plugin output of the Check_MK active check as part of an error
message. The commandline could contain passwords - however.  So this
has now been changed into just outputting the path to the executable
(e.g. <tt>/omd/sites/mysite/share/check_mk/agents/special/agent_vsphere</tt>).



More information about the checkmk-werks-lvl1 mailing list