Werk #15026: Disallow python_plugins and lnx_remote_alert_handlers agent config options for users without the "add_or_modify_executables" permission

Komponente Setup
Titel Disallow python_plugins and lnx_remote_alert_handlers agent config options for users without the "add_or_modify_executables" permission
Datum 15.03.2024
Level Kleine Änderung
Klasse Bugfix
Kompatibilität Kompatibel - benötigt kein manuelles Eingreifen
Checkmk versions & editions
2.4.0b1 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.3.0b4 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)
2.2.0p26 Checkmk Raw (CRE), Checkmk Enterprise (CEE), Checkmk Cloud (CCE), Checkmk MSP (CME)

Without the "add_or_modify_executables" permission users do not have the right to change any executable run by checkmk, either on the site or via the agent. The agent config options "python_plugins" and "lnx_remote_alert_handlers" have not yet checked for that permission.

In the UI "python_plugins" and "lnx_remote_alert_handlers are called "Python agent plugin execution (UNIX)" and "Remote alert handler (Linux)" respectively.

Zur Liste aller Werks