Compare commits

...
Sign in to create a new pull request.

42 commits

Author SHA1 Message Date
Orion Poplawski
7864f135fa 2.0 is out of support and has broken deps, move to 2.2 2018-10-31 15:18:25 -06:00
Volker Fröhlich
c7ccc76572 New and final version of the 2.0 series: 2.0.21
http://www.zabbix.com/life_cycle_and_release_policy
2017-06-23 22:42:03 +02:00
Volker Fröhlich
85fb92f6a6 New version 2.0.20 2016-12-11 13:16:14 +01:00
Volker Fröhlich
f6c9a8f19e New version 2.0.19 2016-10-09 11:20:21 +02:00
Volker Fröhlich
dca20f68b7 New version 2.0.16 2015-11-12 23:11:17 +01:00
Volker Fröhlich
aafbb60867 New version 2.0.15
- Remove su instruction from logrotate config file (BZ 1202602, 1251728)
2015-08-12 00:40:34 +02:00
Volker Fröhlich
37c271864e Correct typo in getent in scriplet 2014-09-25 19:59:11 +02:00
Volker Fröhlich
fe5ba0f154 New upstream release, /var/run ownership
- Use the upstream tarball, now that non-free json was replaced with android-json
- Clean between builds, otherwise zabbix_{proxy,server} are compiled
  again on install; make server and proxy package noarch now
- Harmonize package descriptions and summaries
- Sort out /var/run ownership issue when only installing the agent
2014-09-11 17:48:42 +02:00
Volker Fröhlich
6a1cac2ea7 Add patch for zbx-8158 (CVE-2014-3005) 2014-06-20 08:34:46 +02:00
Volker Fröhlich
4e87216a71 New upstream release 2.0.12 and patch for ZBX-8238
- ZBX-8238 (logrt may continue reading an old file repeatedly)
2014-06-03 22:11:55 +02:00
Volker Fröhlich
5bdbfe2a32 Handle logrotate directions properly 2014-06-03 22:07:39 +02:00
Volker Fröhlich
3f5b071cec New upstream release 2.0.11 2014-02-12 12:01:51 +01:00
Volker Fröhlich
1230a27d03 To be rebased 2014-02-03 08:47:41 +01:00
Volker Fröhlich
d4237cf051 Fix typo in proxy init script and improve the README
- The start function had a typo causing failure
- Improved the section on running multiple instances in the README
2013-12-15 14:58:21 +01:00
Volker Fröhlich
7fe5d55eb9 Upload correct tarball and add a note on proxy/server to README 2013-12-13 23:56:37 +01:00
Volker Fröhlich
3e7c729db2 New release 2.0.10 and init file improvements (BZ#1018293)
- Upstream release 2.0.10
- Drop obsolete patch ZBX-7479 (previous CVE)
- Improve init scripts to not kill other instances (BZ#1018293)
- General overhaul of init scripts and documentation in README
- Harmonize scriptlet if-clause style
2013-12-13 23:08:15 +01:00
Volker Fröhlich
9170450dde Possible remote command injection ZBX-7479 (CVE-2013-6824) 2013-12-03 19:40:56 +01:00
Volker Fröhlich
afd214492d New upstream release 2.0.9
- Drop all patches incorporated in this release
2013-10-09 21:41:15 +02:00
Volker Fröhlich
621dfbcb3e Correct release number 2013-10-02 10:54:28 +02:00
Volker Fröhlich
02468f2fc9 Add patch for CVE-2013-5743 (SQL injection vulnerability, ZBX-7091)
-Also add patch for ZBX-6922 (Failing host XML import)
2013-10-02 10:47:49 +02:00
Volker Fröhlich
79d978de86 SQL speed-up patch for graphs (ZBX-6804) 2013-10-02 10:47:49 +02:00
Volker Fröhlich
8d8672155a Require php-ldap and ZBX-6992 (Service SQL) 2013-09-13 10:44:56 +02:00
Volker Fröhlich
c0be11fd7c New upstream version 2.0.8
- Create and configure a spooling directory for fping files outside of /tmp
- Update README to reflect that and add a SELinux section
- Drop PrivateTmp from systemd unit files
- Drop patch for ZBX-6526 (solved upstream)
- Drop patch for CVE-2012-6086 (solved upstream)
- Correct path for the flash applet when removing
- Truncate changelog
2013-08-23 22:55:07 -07:00
Volker Fröhlich
081d6a943b Patch for CVE-2012-6086
Possible security issue due to misuse of the libcurl API
https://support.zabbix.com/browse/ZBX-5924
2013-07-30 17:18:24 +02:00
Volker Fröhlich
7fd36e0289 Actually apply patch; solve cause for zabbix sub-directories in zabbixsrv's home
- Remove origin of directories BZ#867159, comment 14 and 16
2013-05-07 16:41:40 +02:00
Volker Fröhlich
ba458dd0d7 Solve /var/run permissions, add patch ZBX-6526
- Add patch for ZBX-6526
- Solve permission problem with /var/run/zabbix in Fedora (BZ#904041)
2013-05-06 23:38:50 +02:00
Volker Fröhlich
790a650230 Remove obsolete patch files 2013-04-22 15:35:44 +02:00
Volker Fröhlich
c4be78932f New upstream release 2.0.6 2013-04-22 15:29:54 +02:00
Volker Fröhlich
24f44f5b15 Add patch for ZBX-6318 2013-03-19 13:12:17 +01:00
Volker Fröhlich
3a52765f17 Include patch for ZBX-6290 2013-03-07 11:48:21 +01:00
Volker Fröhlich
61acbc797f New upstream release 2.0.5
- Also correct configuration comments in init scripts
2013-02-12 13:12:59 +01:00
Volker Fröhlich
2934dfdd0e Correct comments on configuration in init scripts
The init scripts claimed the configuration was still in /etc/zabbix,
which is not the case anymore.
2013-02-11 11:37:05 +01:00
Volker Fröhlich
7999746b52 Correct release number 2013-02-09 17:54:51 +01:00
Volker Fröhlich
110cd4715d Re-add patch for traceroute path in SQL dumps 2013-02-09 17:41:04 +01:00
Volker Fröhlich
662d4681c5 Bump release number 2013-01-22 11:32:33 +01:00
Volker Fröhlich
6afe7903cc Solve conflict between proxy, server and base package
- Remove zabbix_get plus manpage from the proxy files section
- Solve conflict for externalscripts symlink between proxy and
  server package
2013-01-22 11:31:05 +01:00
Volker Fröhlich
1dad1297e8 Patch LDAP security issue CVE-2013-1364 2013-01-17 22:28:12 +01:00
Volker Fröhlich
a9e361ae98 SNMP trap patch ZBX-6101, agent pre-un script
- Patch for ZBX-6101, where SNMP traps were not processed in
  maintenances with data collection
- The pre-un scriptlet of the agent was empty for EL
- Updated logrotate file with "su" statements for Fedora
- Don't own /var/lib/run directories in Fedora
2013-01-14 22:20:27 +01:00
Volker Fröhlich
f4d7e885aa New release 2.0.4 plus SNMP patch
Use upstream patch to solve the issue described in ZBX-3379:
SNMP polling breaks if daemon is bound to an interface
2012-12-08 14:28:37 +01:00
Volker Fröhlich
e1ddb3874c APPLY FPING PATCH ONLY FOR FEDORA
- Fping 3 is not in EPEL
2012-11-26 10:28:37 +01:00
Volker Fröhlich
3ab0dd56c4 Update httpd configuration for Apache 2.4
- Solving BZ#871498
2012-11-13 22:38:32 +01:00
Volker Fröhlich
a698f68ebf Minor glitches, better documentation, Req. php
- Remove further references to /usr/local in configuration files
- Improve documentation, finishing the TODOs
- Explicitly require php again, as it turned out necessary
2012-11-09 00:16:24 +01:00
21 changed files with 1 additions and 1793 deletions

1
.gitignore vendored
View file

@ -1 +0,0 @@
/zabbix-2.0.3-free.tar.gz

1
dead.package Normal file
View file

@ -0,0 +1 @@
2.0 is out of support and has broken deps, move to 2.2

View file

@ -1 +0,0 @@
10c50c7ff5f605139590e1e03c40026d zabbix-2.0.3-free.tar.gz

View file

@ -1,39 +0,0 @@
diff -up zabbix-1.8.12/src/libs/zbxicmpping/icmpping.c.fping3 zabbix-1.8.12/src/libs/zbxicmpping/icmpping.c
--- zabbix-1.8.12/src/libs/zbxicmpping/icmpping.c.fping3 2012-04-24 16:31:36.000000000 +0200
+++ zabbix-1.8.12/src/libs/zbxicmpping/icmpping.c 2012-04-24 16:32:31.000000000 +0200
@@ -42,34 +42,7 @@ static const char *source_ip6_option = N
static void get_source_ip_option(const char *fping, const char **option, unsigned char *checked)
{
- FILE *f;
- char *p, tmp[MAX_STRING_LEN];
-
- zbx_snprintf(tmp, sizeof(tmp), "%s -h 2>&1", fping);
-
- if (NULL == (f = popen(tmp, "r")))
- return;
-
- while (NULL != fgets(tmp, sizeof(tmp), f))
- {
- for (p = tmp; isspace(*p); p++)
- ;
-
- if ('-' == p[0] && 'I' == p[1] && isspace(p[2]))
- {
- *option = "-I";
- break;
- }
-
- if ('-' == p[0] && 'S' == p[1] && isspace(p[2]))
- {
- *option = "-S";
- break;
- }
- }
-
- pclose(f);
-
+ *option = "-S";
*checked = 1;
}

View file

@ -1,11 +0,0 @@
diff -up zabbix-2.0.1/frontends/php/include/screens.inc.php.orig zabbix-2.0.1/frontends/php/include/screens.inc.php
--- zabbix-2.0.1/frontends/php/include/screens.inc.php.orig 2012-06-27 23:03:03.000000000 +0200
+++ zabbix-2.0.1/frontends/php/include/screens.inc.php 2012-07-12 16:29:02.000000000 +0200
@@ -25,7 +25,6 @@ require_once dirname(__FILE__).'/js.inc.
function screen_resources($resource = null) {
$resources = array(
- SCREEN_RESOURCE_CLOCK => _('Clock'),
SCREEN_RESOURCE_DATA_OVERVIEW => _('Data overview'),
SCREEN_RESOURCE_GRAPH => _('Graph'),
SCREEN_RESOURCE_ACTIONS => _('History of actions'),

View file

@ -1,22 +0,0 @@
diff -Nur zabbix-2.0.2/frontends/php/include/config.inc.php zabbix-2.0.2-conf/frontends/php/include/config.inc.php
--- zabbix-2.0.2/frontends/php/include/config.inc.php 2012-07-31 11:16:47.000000000 +0200
+++ zabbix-2.0.2-conf/frontends/php/include/config.inc.php 2012-09-04 00:07:03.217816413 +0200
@@ -31,7 +31,7 @@
CProfiler::getInstance()->start();
require_once dirname(__FILE__).'/profiles.inc.php';
-require_once dirname(__FILE__).'/../conf/maintenance.inc.php';
+require_once '/etc/zabbix/web/maintenance.inc.php';
// abc sorting
require_once dirname(__FILE__).'/acknow.inc.php';
@@ -64,8 +64,7 @@
$USER_RIGHTS = array();
$ZBX_LOCALNODEID = 0;
$ZBX_LOCMASTERID = 0;
-$ZBX_CONFIGURATION_FILE = './conf/zabbix.conf.php';
-$ZBX_CONFIGURATION_FILE = realpath(dirname($ZBX_CONFIGURATION_FILE)).DIRECTORY_SEPARATOR.basename($ZBX_CONFIGURATION_FILE);
+$ZBX_CONFIGURATION_FILE = '/etc/zabbix/web/zabbix.conf.php';
// include tactical overview modules
require_once dirname(__FILE__).'/locales.inc.php';

View file

@ -1,12 +0,0 @@
diff -Nur zabbix-2.0.3/frontends/php/include/defines.inc.php zabbix-2.0.3-fonts/frontends/php/include/defines.inc.php
--- zabbix-2.0.3/frontends/php/include/defines.inc.php 2012-10-03 16:41:36.000000000 +0200
+++ zabbix-2.0.3-fonts/frontends/php/include/defines.inc.php 2012-10-05 23:47:17.341790748 +0200
@@ -34,7 +34,7 @@
define('ZBX_WIDGET_ROWS', 20);
-define('ZBX_FONTPATH', realpath('fonts')); // where to search for font (GD > 2.0.18)
+define('ZBX_FONTPATH', '/usr/share/fonts/dejavu'); // where to search for font (GD > 2.0.18)
define('ZBX_GRAPH_FONT_NAME', 'DejaVuSans'); // font file name
define('ZBX_GRAPH_LEGEND_HEIGHT', 120); // when graph height is less then this value, some legend will not show up

View file

@ -1,80 +0,0 @@
#!/bin/sh
#
# chkconfig: - 86 14
# description: Zabbix agent daemon
# processname: zabbix_agentd
# config: /etc/zabbix/zabbix_agentd.conf
#
### BEGIN INIT INFO
# Provides: zabbix-agent
# Required-Start: $local_fs $network
# Required-Stop: $local_fs $network
# Should-Start: zabbix zabbix-proxy
# Should-Stop: zabbix zabbix-proxy
# Default-Start:
# Default-Stop: 0 1 2 3 4 5 6
# Short-Description: Start and stop Zabbix agent
# Description: Zabbix agent
### END INIT INFO
# Source function library.
. /etc/rc.d/init.d/functions
exec=/usr/sbin/zabbix_agentd
prog=${exec##*/}
syscf=zabbix-agent
lockfile=/var/lock/subsys/zabbix-agent
[ -e /etc/sysconfig/$syscf ] && . /etc/sysconfig/$syscf
start()
{
echo -n $"Starting Zabbix agent: "
daemon --user zabbix $exec
rv=$?
echo
[ $rv -eq 0 ] && touch $lockfile
return $rv
}
stop()
{
echo -n $"Shutting down Zabbix agent: "
killproc $prog
rv=$?
echo
[ $rv -eq 0 ] && rm -f $lockfile
return $rv
}
restart()
{
stop
start
}
case "$1" in
start|stop|restart)
$1
;;
force-reload)
restart
;;
status)
status $prog
;;
try-restart|condrestart)
if status $prog >/dev/null ; then
restart
fi
;;
reload)
action $"Service ${0##*/} does not support the reload action: " /bin/false
exit 3
;;
*)
echo $"Usage: $0 {start|stop|status|restart|try-restart|force-reload}"
exit 2
;;
esac

View file

@ -1,13 +0,0 @@
[Unit]
Description=Zabbix Monitor Agent
After=syslog.target network.target
[Service]
Type=oneshot
ExecStart=/usr/sbin/zabbix_agentd
RemainAfterExit=yes
User=zabbix
PrivateTmp=yes
[Install]
WantedBy=multi-user.target

View file

@ -1,115 +0,0 @@
=Custom in Fedora=
_Web configuration_
Web configuration resides in /etc/zabbix/web.
_Log files_
Log files are located in /var/log/zabbix.
_Where's my Flash watch?_
It's not included in Fedora! Fedora's policy does not allow to include blobs.
_No htaccess files_
Fedora ships an Apache configuration file instead. This solutions performs
better and is easier to maintain.
=Additional changes from 1.8 to 2.0 in Fedora=
_Zabbix 2.0 packages conflict Zabbix 1.8_
This measure was taken because this major version introduces various database
schema changes. A silent update would render Zabbix inoperational and possibly
break the database. Besides that, Zabbix 2.0 server only works with other 2.0
servers and proxies. Distributed setups must therefore be updated at the same
time.
http://www.zabbix.com/documentation/2.0/manual/appendix/compatibility
_Two users_
There's a certain security risk involved, running agent and proxy/server as the
same user. This package therefore introduces an additional zabbixsrv user, used
for proxy and server. Please check the permissions of your scripts and group
memberships, if necessary.
_Using the Alternatives system instead of conflicting sub-packages_
You can now install Zabbix proxies or servers compiled for different database
backends on the same system. While this is not intended to happily switch back
and forth, it allows you to:
- Stop the daemon
- "Run alternatives --config zabbix-server" or "alternatives --config
zabbix-proxy"
- Make your choice
- If you're using systemd, run systemctl reload
- Adjust the configuration file
- Start the daemon
#TODO: Why does it need "restart" in cases?
Alternatives considers the first installed implementation of server or proxy as
default respectively.
Don't forget to reconfigure the frontend when you switch the server to a
different DB implementation!
_Configuration changes_
Zabbix 2.0 places configuration files directly in /etc and a couple of
sub-directories. Symlinks preserve compatibility. maintenance.inc.php also moved
to /etc/zabbix/web. #TODO: Didn't install *.conf.d directories
_Alert and media scripts_
The Alert and media script directories have moved to /var/lib/zabbixsrv.
Symlinks preserver compatibility.
/var/lib/zabbix is now intended for scripts run by the agent. Please move your
server or proxy scripts to /var/lib/zabbixsrv. Be sure to check permissions and
ownership.
_No Java bridge_
The Zabbix Java bridge can not be included now, due to legal issue with one of
the modules (json).
_No Sqlite frontend or server implementation_
Sadly it doesn't work with how Fedora's/EPEL's PHP is compiled.
--------------------------------------------------------------------------------
_Guide for updating to 2.0_
http://www.zabbix.com/documentation/2.0/manual/installation/upgrade_notes
Picking the relevant steps from
http://www.zabbix.com/documentation/2.0/manual/installation/upgrade
- Stop the Zabbix server/proxy
TODO: Did it already stop when uninstalling 1.8?
- Back up the Zabbix database (really!)
- Make sure the database user has sufficing permissions.
- Run the fitting database update script/s
- The scripts can run very long, depending on the content of your database and
your hardware; A case running 90 hours was reported. 2.0.3 should improve the
situation a lot.
- Review all rpmnew and rpmsave files; merge where necessary
- Review permissions, ownerships and group memberships for zabbixsrv
Volker Fröhlich volker27@gmx.at Sep 15 2012

View file

@ -1,7 +0,0 @@
/var/log/zabbix/zabbix_COMPONENT.log {
missingok
monthly
notifempty
compress
create 0664 zabbix zabbix
}

View file

@ -1,13 +0,0 @@
[Unit]
Description=Zabbix MySQL Proxy Agent
After=syslog.target network.target mysqld.service
[Service]
Type=oneshot
ExecStart=/usr/sbin/zabbix_proxy
RemainAfterExit=yes
User=zabbixsrv
PrivateTmp=yes
[Install]
WantedBy=multi-user.target

View file

@ -1,13 +0,0 @@
[Unit]
Description=Zabbix PostgreSQL Proxy Agent
After=syslog.target network.target postgresql.service
[Service]
Type=oneshot
ExecStart=/usr/sbin/zabbix_proxy
RemainAfterExit=yes
User=zabbixsrv
PrivateTmp=yes
[Install]
WantedBy=multi-user.target

View file

@ -1,13 +0,0 @@
[Unit]
Description=Zabbix SQLite3 Proxy Agent
After=syslog.target network.target
[Service]
Type=oneshot
ExecStart=/usr/sbin/zabbix_proxy
RemainAfterExit=yes
User=zabbixsrv
PrivateTmp=yes
[Install]
WantedBy=multi-user.target

View file

@ -1,78 +0,0 @@
#!/bin/sh
#
# chkconfig: - 85 15
# description: Zabbix proxy daemon
# config: /etc/zabbix/zabbix_proxy.conf
#
### BEGIN INIT INFO
# Provides: zabbix-proxy
# Required-Start: $local_fs $network
# Required-Stop: $local_fs $network
# Default-Start:
# Default-Stop: 0 1 2 3 4 5 6
# Short-Description: Start and stop Zabbix proxy
# Description: Zabbix proxy
### END INIT INFO
# Source function library.
. /etc/rc.d/init.d/functions
exec=zabbix_proxy
prog=${exec##*/}
lockfile=/var/lock/subsys/zabbix-proxy
conf=
syscf=zabbix-proxy
[ -e /etc/sysconfig/$syscf ] && . /etc/sysconfig/$syscf
start()
{
echo -n $"Starting Zabbix proxy: "
daemon --user zabbixsrv $exec
rv=$?
echo
[ $rv -eq 0 ] && touch $lockfile
return $rv
}
stop()
{
echo -n $"Shutting down Zabbix proxy: "
killproc $prog
rv=$?
echo
[ $rv -eq 0 ] && rm -f $lockfile
return $rv
}
restart()
{
stop
start
}
case "$1" in
start|stop|restart)
$1
;;
force-reload)
restart
;;
status)
status $prog
;;
try-restart|condrestart)
if status $prog >/dev/null ; then
restart
fi
;;
reload)
action $"Service ${0##*/} does not support the reload action: " /bin/false
exit 3
;;
*)
echo $"Usage: $0 {start|stop|status|restart|try-restart|force-reload}"
exit 2
;;
esac

View file

@ -1,13 +0,0 @@
[Unit]
Description=Zabbix Server with MySQL DB
After=syslog.target network.target mysqld.service
[Service]
Type=oneshot
ExecStart=/usr/sbin/zabbix_server
RemainAfterExit=yes
User=zabbixsrv
PrivateTmp=yes
[Install]
WantedBy=multi-user.target

View file

@ -1,13 +0,0 @@
[Unit]
Description=Zabbix Server with PostgreSQL DB
After=syslog.target network.target postgresql.service
[Service]
Type=oneshot
ExecStart=/usr/sbin/zabbix_server
RemainAfterExit=yes
User=zabbixsrv
PrivateTmp=yes
[Install]
WantedBy=multi-user.target

View file

@ -1,77 +0,0 @@
#!/bin/sh
#
# chkconfig: - 85 15
# description: Zabbix server daemon
# config: /etc/zabbix/zabbix_server.conf
#
### BEGIN INIT INFO
# Provides: zabbix
# Required-Start: $local_fs $network
# Required-Stop: $local_fs $network
# Default-Start:
# Default-Stop: 0 1 2 3 4 5 6
# Short-Description: Start and stop Zabbix server
# Description: Zabbix server
### END INIT INFO
# Source function library.
. /etc/rc.d/init.d/functions
exec=zabbix_server
prog=${exec##*/}
lockfile=/var/lock/subsys/zabbix
syscf=zabbix-server
[ -e /etc/sysconfig/$syscf ] && . /etc/sysconfig/$syscf
start()
{
echo -n $"Starting Zabbix server: "
daemon --user zabbixsrv $exec
rv=$?
echo
[ $rv -eq 0 ] && touch $lockfile
return $rv
}
stop()
{
echo -n $"Shutting down Zabbix server: "
killproc $prog
rv=$?
echo
[ $rv -eq 0 ] && rm -f $lockfile
return $rv
}
restart()
{
stop
start
}
case "$1" in
start|stop|restart)
$1
;;
force-reload)
restart
;;
status)
status $prog
;;
try-restart|condrestart)
if status $prog >/dev/null ; then
restart
fi
;;
reload)
action $"Service ${0##*/} does not support the reload action: " /bin/false
exit 3
;;
*)
echo $"Usage: $0 {start|stop|status|restart|try-restart|force-reload}"
exit 2
;;
esac

View file

@ -1 +0,0 @@
D /var/run/zabbix 0755 zabbix zabbix -

View file

@ -1,48 +0,0 @@
#
# Zabbix monitoring system php web frontend
#
Alias /zabbix /usr/share/zabbix
<Directory "/usr/share/zabbix">
Options FollowSymLinks
AllowOverride None
Order allow,deny
Allow from all
</Directory>
<Directory "/usr/share/zabbix/conf">
Order deny,allow
Deny from all
<files *.php>
Order deny,allow
Deny from all
</files>
</Directory>
<Directory "/usr/share/zabbix/api">
Order deny,allow
Deny from all
<files *.php>
Order deny,allow
Deny from all
</files>
</Directory>
<Directory "/usr/share/zabbix/include">
Order deny,allow
Deny from all
<files *.php>
Order deny,allow
Deny from all
</files>
</Directory>
<Directory "/usr/share/zabbix/include/classes">
Order deny,allow
Deny from all
<files *.php>
Order deny,allow
Deny from all
</files>
</Directory>

File diff suppressed because it is too large Load diff