head 1.4; access; symbols pkgsrc-2017Q3:1.3.0.60 pkgsrc-2017Q3-base:1.3 pkgsrc-2017Q2:1.3.0.56 pkgsrc-2017Q2-base:1.3 pkgsrc-2017Q1:1.3.0.54 pkgsrc-2017Q1-base:1.3 pkgsrc-2016Q4:1.3.0.52 pkgsrc-2016Q4-base:1.3 pkgsrc-2016Q3:1.3.0.50 pkgsrc-2016Q3-base:1.3 pkgsrc-2016Q2:1.3.0.48 pkgsrc-2016Q2-base:1.3 pkgsrc-2016Q1:1.3.0.46 pkgsrc-2016Q1-base:1.3 pkgsrc-2015Q4:1.3.0.44 pkgsrc-2015Q4-base:1.3 pkgsrc-2015Q3:1.3.0.42 pkgsrc-2015Q3-base:1.3 pkgsrc-2015Q2:1.3.0.40 pkgsrc-2015Q2-base:1.3 pkgsrc-2015Q1:1.3.0.38 pkgsrc-2015Q1-base:1.3 pkgsrc-2014Q4:1.3.0.36 pkgsrc-2014Q4-base:1.3 pkgsrc-2014Q3:1.3.0.34 pkgsrc-2014Q3-base:1.3 pkgsrc-2014Q2:1.3.0.32 pkgsrc-2014Q2-base:1.3 pkgsrc-2014Q1:1.3.0.30 pkgsrc-2014Q1-base:1.3 pkgsrc-2013Q4:1.3.0.28 pkgsrc-2013Q4-base:1.3 pkgsrc-2013Q3:1.3.0.26 pkgsrc-2013Q3-base:1.3 pkgsrc-2013Q2:1.3.0.24 pkgsrc-2013Q2-base:1.3 pkgsrc-2013Q1:1.3.0.22 pkgsrc-2013Q1-base:1.3 pkgsrc-2012Q4:1.3.0.20 pkgsrc-2012Q4-base:1.3 pkgsrc-2012Q3:1.3.0.18 pkgsrc-2012Q3-base:1.3 pkgsrc-2012Q2:1.3.0.16 pkgsrc-2012Q2-base:1.3 pkgsrc-2012Q1:1.3.0.14 pkgsrc-2012Q1-base:1.3 pkgsrc-2011Q4:1.3.0.12 pkgsrc-2011Q4-base:1.3 pkgsrc-2011Q3:1.3.0.10 pkgsrc-2011Q3-base:1.3 pkgsrc-2011Q2:1.3.0.8 pkgsrc-2011Q2-base:1.3 pkgsrc-2011Q1:1.3.0.6 pkgsrc-2011Q1-base:1.3 pkgsrc-2010Q4:1.3.0.4 pkgsrc-2010Q4-base:1.3 pkgsrc-2010Q3:1.3.0.2 pkgsrc-2010Q3-base:1.3 pkgsrc-2010Q2:1.2.0.22 pkgsrc-2010Q2-base:1.2 pkgsrc-2010Q1:1.2.0.20 pkgsrc-2010Q1-base:1.2 pkgsrc-2009Q4:1.2.0.18 pkgsrc-2009Q4-base:1.2 pkgsrc-2009Q3:1.2.0.16 pkgsrc-2009Q3-base:1.2 pkgsrc-2009Q2:1.2.0.14 pkgsrc-2009Q2-base:1.2 pkgsrc-2009Q1:1.2.0.12 pkgsrc-2009Q1-base:1.2 pkgsrc-2008Q4:1.2.0.10 pkgsrc-2008Q4-base:1.2 pkgsrc-2008Q3:1.2.0.8 pkgsrc-2008Q3-base:1.2 cube-native-xorg:1.2.0.6 cube-native-xorg-base:1.2 pkgsrc-2008Q2:1.2.0.4 pkgsrc-2008Q2-base:1.2 cwrapper:1.2.0.2 pkgsrc-2008Q1:1.1.0.16 pkgsrc-2008Q1-base:1.1 pkgsrc-2007Q4:1.1.0.14 pkgsrc-2007Q4-base:1.1 pkgsrc-2007Q3:1.1.0.12 pkgsrc-2007Q3-base:1.1 pkgsrc-2007Q2:1.1.0.10 pkgsrc-2007Q2-base:1.1 pkgsrc-2007Q1:1.1.0.8 pkgsrc-2007Q1-base:1.1 pkgsrc-2006Q4:1.1.0.6 pkgsrc-2006Q4-base:1.1 pkgsrc-2006Q3:1.1.0.4 pkgsrc-2006Q3-base:1.1 pkgsrc-2006Q2:1.1.0.2 pkgsrc-2006Q2-base:1.1; locks; strict; comment @# @; 1.4 date 2017.11.03.17.14.10; author bsiegert; state dead; branches; next 1.3; commitid PSODU34nsLG52CdA; 1.3 date 2010.09.29.11.21.02; author obache; state Exp; branches; next 1.2; 1.2 date 2008.06.21.14.52.49; author tonnerre; state Exp; branches; next 1.1; 1.1 date 2006.06.04.11.06.51; author joerg; state Exp; branches; next ; desc @@ 1.4 log @Update nagios-nrpe to 3.2.0. From Alberto Mijares in PR pkg/52028. [3.2.0](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-3.2.0) - 2017-06-26 --------------------------------------------------------------------------------------- **ENHANCEMENTS** * Added max_commands definition to nrpe.cfg to rate limit simultaneous fork()ed children (Bryan Heden) * Added -E, --stderr-to-stdout options for check_nrpe to redirect output (Bryan Heden) * Added support for Gentoo init (Troy Lea @@box293) * Cleaned up code a bit, updated readmes and comments across the board (Bryan Heden) * Added -V, --version to nrpe and fixed the output (Bryan Heden) * Added different SSL error messages to be able to pinpoint where some SSL errors occured (Bryan Heden) * Updated logic in al parse_allowed_hosts (Bryan Heden) * Added builtin OpenSSL Engine support where available (Bryan Heden + @@skrueger8) * Clean up compilation warnings (Bryan Heden) * Added more commented commands in nrpe.cfg (Bryan Heden) **FIXES** * Undefined check returns UNKNOWN (Bryan Heden) * Fix incompatibility with OpenSSL 1.1.0 via SECLEVEL distinction (Bryan Heden) * Fix ipv4 error in logfile even if address is ipv6 (Bryan Heden) * Fix improper valid/invalid certificate warnings (Bryan Heden) [3.1.1](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-3.1.1) - 2017-05-24 --------------------------------------------------------------------------------------- **FIXES** * The '--log-file=' or '-g' option is missing from the help (John Frickson) * check_nrpe = segfault when specifying a config file (John Frickson) * Alternate log file not being used soon enough (John Frickson) * Unable to compile v3.1.0rc1 with new SSL checks on rh5 (John Frickson) * Unable to compile nrpe-3.1.0 - undefined references to va_start, va_end (John Frickson) * Can't build on Debian Stretch, openssl 1.1.0c (John Frickson) * Fix build failure with -Werror=format-security (Bas Couwenberg) * Fixed a typo in `nrpe.spec.in` (John Frickson) * More detailed error logging for SSL (John Frickson) * Fix infinite loop when unresolvable host is in allowed_hosts (Nick / John Frickson) [3.1.0](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-3.1.0) - 2017-04-17 --------------------------------------------------------------------------------------- **ENHANCEMENTS** * Added option to nrpe.cfg.in that can override hard-coded NASTY_METACHARS (John Frickson) * While processing 'include_dir' statement, sort the files (Philippe Kueck / John Frickson) * nrpe can now write to a log file using 'log_file=' in nrpe.cfg (John Frickson) * check_nrpe can now write to a log file using '--log-file=' or '-g' options (John Frickson) **FIXES** * Added missing debugging syslog entries, and changed printf()'s to syslog()'s. (Jobst Schmalenbach) * Fix help output for ssl option (configure) (Ruben Kerkhof) * Fixes to README.SSL.md and SECURITY.md (Elan Ruusamäe) * Changed the 'check_load' command in nrpe.cfg.in (minusdavid) * Cleanup of config.h.in suggested by Ruben Kerkhof * Minor change to logging in check_nrpe (John Frickson) * Solaris 11 detection is broken in configure (John Frickson) * Removed function `b64_decode` which wasn't being used (John Frickson) * check_nrpe ignores -a option when -f option is specified (John Frickson) * Added missing LICENSE file (John Frickson) * Off-by-one BO in my_system() (John Frickson) * Got rid of some compiler warnings (Stefan Krüger / John Frickson) * Add SOURCE_DATE_EPOCH specification support for reproducible builds. (Bas Couwenberg) * nrpe 3.0.1 allows TLSv1 and TLSv1.1 when I configure for TLSv1.2+ (John Frickson) * "Remote %s accepted a Version %s Packet", please add to debug (John Frickson) * nrpe 3.0.1 segfaults when key and/or cert are broken symlinks (John Frickson) * Fixed a couple of typos in docs/NRPE.* files (Ludmil Meltchev) * Changed release date to ISO format (yyyy-mm-dd) (John Frickson) * Fix systemd unit description (Bas Couwenberg) * Add reload command to systemd service file (Bas Couwenberg) * fix file not found error when updating version (Sven Nierlein) * Spelling fixes (Josh Soref) * Return UNKNOWN when check_nrpe cannot communicate with nrpe and -u set (John Frickson) * xinetd.d parameter causes many messages in log file (John Frickson) * Fixes for openssl 1.1.x (Stephen Smoogen / John Frickson) * PATH and other environment variables not set with numeric nrpe_user (John Frickson) * rpmbuild -ta nrpe-3.0.1.tar.gz failed File not found: /etc/init.d/nrpe (bvandi / John Frickson) [3.0.1](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-3.0.1) - 2016-09-08 --------------------------------------------------------------------------------------- **FIXES** * _set_rc: command not found reported by init script (John Frickson) * Version string contains name (John Frickson) * Changes to get 'rpmbuild' to work - nrpe.spec file outdated (John Frickson) * typo in startup/default-xinetd.in (Philippe Kueck) * debug output missing command name (Philippe Kueck) * /usr/lib/tmpfiles.d/ndo2db.conf should have 'd' type, not 'D' (John Frickson) * Fixes in parse_allowed_hosts() and called functions (Jobst Schmalenbach / John Frickson) * nrpe.cfg: 'debug' statement needs to be first in file (Jobst Schmalenbach / John Frickson) [3.0.0](https://github.com/NagiosEnterprises/nrpe/releases/tag/nrpe-3.0.0) - 2016-08-01 --------------------------------------------------------------------------------------- **SECURITY** * Fix for CVE-2014-2913 * Added function to clean the environment before forking. (John Frickson) **ENHANCEMENTS** * Added support for optional config file to check_nrpe. With the new SSL parameters, the line was getting long. The config file is specified with --config-file= or -f parameters. The config file must look like command line options, but the options can be on separate lines. It MUST NOT include --config-file (-f), --command (-c) or --args (-a). If any options are in both the config file and on the command line, the command line options are used. * make can now add users and groups using "make install-groups-users" (John Frickson) * Added "nrpe-uninstall" script to the same directory nrpe get installed to (John Frickson) * Updated code so configure && make will work on AIX, HP-UX, Solaris, OS X. There should be no errors or warnings. Let me know if any errors or warning appear (John Frickson) * Added command-line option to prevent forking, since some of the init replacements (such as systemd, etc.) don't want daemons to fork (John Frickson) * Added autoconf macros and additional files to better support multi-platform config and compile. The default will still set up to install to /usr/local/nagios but I added a new configure option: '--enable-install-method='. If is 'opt', everything will install to '/opt/nagios'. If is 'os', installation will be to O/S- and distribution-specific locations, such as /usr/sbin, /usr/lib/nagios, /etc/nagios, and so on. * Added additional init and inetd config files to support more systems, including SuSE, Debian, Slackware, Gentoo, *BSD, AIX, HP-UX, Solaris, OS X. * Added listen_queue_size as configuration option (Vadim Antipov, Kaspersky Lab) * Reworked SSL/TLS. See the README.SSL.md file for full info. (John Frickson) * Added support for version 3 variable sized packets up to 64KB. nrpe will accept either version from check_nrpe. check_nrpe will try to send a version 3 packet first, and fall back to version 2. check_nrpe can be forced to only send version 2 packets if the switch `-2` is used. (John Frickson) * Added extended timeout syntax in the -t : format. (ABrist) **FIXES** * Fixed configure to check more places for SSL headers/libs. (John Frickson) * Added ifdefs for complete_SSL_shutdown to compile without SSL. (Matthew L. Daniel) * Renamed configure.in to configure.ac and added check for sigaction (John Frickson) * Replaced all instances of signal() with sigaction() + blocking (John Frickson) * check_nrpe does not parse passed arguments correctly (John Frickson) * NRPE should not start if cannot write pid file (John Frickson) * Fixed out-of-bounds error (return code 255) for some failures (John Frickson) * Connection Timeout and Connection Refused messages need a new line (Andrew Widdersheim) * allowed_hosts doesn't work, if one of the hostnames can't be resolved by dns (John Frickson) * allowed_hosts doesn't work with a hostname resolving to an IPv6 address (John Frickson) * Return UNKNOWN when issues occur (Andrew Widdersheim) * NRPE returns OK if check can't be executed (Andrew Widdersheim) * nrpe 2.15 [regression in Added SRC support on AIX - 2.14] (frphoebus) * compile nrpe - Solaris 9 doesn't have isblank() (lilo, John Frickson) * sample configuration for check_load has crazy sample load avg (ernestoongaro) 2.15 - 09/06/2013 ----------------- * Now compiles on HP-UX (Grant Byers) * Added support for IPv6 (Leo Baltus, Eric Stanley) 2.14 - 12/21/2012 ----------------- * Added configure option to allow bash command substitutions, disabled by default [bug #400] (Eric Stanley) * Patched to shutdown SSL connection completely (Jari Takkala) * Added SRC support on AIX (Thierry Bertaud) * Updated RPM SPEC file to support creating RPMs on AIX (Eric Stanley) * Updated logging to support compiling on AIX (Eric Stanley) @ text @$NetBSD: patch-aa,v 1.3 2010/09/29 11:21:02 obache Exp $ * some platforms don't support LOG_AUTHPRIV and LOG_FTP syslog facility * remove deprecated `errno` definition --- src/nrpe.c.orig 2008-03-10 21:04:43.000000000 +0000 +++ src/nrpe.c @@@@ -613,10 +613,14 @@@@ int get_log_facility(char *varvalue){ log_facility=LOG_UUCP; else if(!strcmp(varvalue,"cron")) log_facility=LOG_CRON; +#ifdef LOG_AUTHPRIV else if(!strcmp(varvalue,"authpriv")) log_facility=LOG_AUTHPRIV; +#endif +#ifdef LOG_FTP else if(!strcmp(varvalue,"ftp")) log_facility=LOG_FTP; +#endif else if(!strcmp(varvalue,"local0")) log_facility=LOG_LOCAL0; else if(!strcmp(varvalue,"local1")) @@@@ -1320,7 +1324,6 @@@@ int my_system(char *command,int timeout, pid_t pid; int status; int result; - extern int errno; char buffer[MAX_INPUT_BUFFER]; int fd[2]; FILE *fp; @ 1.3 log @disable LOG_AUTHPRIV and LOG_FTP syslog facilities if it does not exist. rest part of PR#43921. @ text @d1 1 a1 1 $NetBSD: patch-aa,v 1.2 2008/06/21 14:52:49 tonnerre Exp $ @ 1.2 log @Update nagios-nrpe to version 2.12. Changes: Changes in 2.12: * Fix for unterminated multiline plugin (garbage) output. Changes in 2.11: * Added lib64 library paths to configure script for 64-bit systems. * Added --with-ssl-lib configure script option. * Added --with-log-facility option to control syslog logging. Changes in 2.10: * Moved PDF docs to docs/ subdirectory, added OpenOffice source document. * A critical result is now returned for child processed that die due to a signal. Changes in 2.9: * Fixed bug with --with-nrpe-group configure script option. * Fixed bug with check_disk thresholds in sample config file. * Added NRPE_PROGRAMVERSION and NRPE_MULTILINESUPPORT environment variables for scripts that need to detect NRPE version and capabilities. * Added asprintf() support for systems that are missing it. Changes in 2.8.1: * Fixed configure script error with user-specified NRPE group. Changes in 2.8: * Added support for multiline plugin output (limited to 1KB at the moment). * Changes to sample config files. * Added ';' as an additional prohibited metachar for command arguments. * Updated documentation and added easier installation commands. Changes in 2.7.1: * Changed C++ style comment to C style to fix compilation errors on AIX. Changes in 2.7: * Patches for detection SSL header and library locations. * NRPE daemon will now partially ignore non-fatal configuration file errors and attempt to startup. Changes in 2.6: * Added -u option to check_nrpe to return UNKNOWN states on socket timeouts. * Added connection_timeout variable to NRPE daemon to catch dead client connections. * Added graceful timeout to check_nrpe to ensure connection to NRPE daemon is properly closed. @ text @d1 1 a1 1 $NetBSD$ d3 4 a6 1 --- src/nrpe.c.orig 2008-03-10 22:04:43.000000000 +0100 d8 16 a23 1 @@@@ -1320,7 +1320,6 @@@@ int my_system(char *command,int timeout, @ 1.1 log @Fix errno usage. @ text @d3 1 a3 1 --- src/nrpe.c.orig 2006-05-29 16:23:55.000000000 +0000 d5 1 a5 1 @@@@ -1234,7 +1234,6 @@@@ int my_system(char *command,int timeout, a10 1 char temp_buffer[MAX_INPUT_BUFFER]; d12 1 @