Werk #1373: Do not ouput complete command line when datasource programs fail
Component | Core & setup |
Title | Do not ouput complete command line when datasource programs fail |
Date | Aug 21, 2014 |
Checkmk Edition | Checkmk Raw (CRE) |
Checkmk Version | 1.2.5i6 |
Level | Prominent Change |
Class | Security Fix |
Compatibility | Compatible - no manual interaction needed |
When executing a datasource program like agent_vsphere fails, then Check_MK used to output the complete command line as plugin output of the Check_MK active check as part of an error message. The commandline could contain passwords - however. So this has now been changed into just outputting the path to the executable (e.g. /omd/sites/mysite/share/check_mk/agents/special/agent_vsphere).