add rudimentary check for unowned files

[mirror/dsa-nagios.git] / dsa-nagios-checks / debian / changelog

dsa-nagios-checks (9X) Xnstable; urgency=low

  [ Peter Palfrader ]
  * dsa-check-entropy: 
    - document watermark default
    - fix off-by-one in output
  * dsa-check-backuppg:
    - ignore regular files in pg backup's root directory if they are still
      fresh.
  * dsa-check-config:
    - fix a bashism.
  * dsa-check-log-age-loghost
    - allow minus (-) in hostnames.

  [ Stephen Gran ]
  * Add event_handler to restart services
  * Add dsa-check-raid-megactl for awkward PeRC controllers

  [ Martin Zobel-Helas ]
  * add rudimentary check for unowned files 

 -- Martin Zobel-Helas <zobel@debian.org>  Mon, 02 Jan 2012 16:46:33 +0100

dsa-nagios-checks (89) unstable; urgency=low

  * dsa-check-running-kernel: kFreeBSD support.
  * Add dsa-check-entropy.

 -- Peter Palfrader <weasel@debian.org>  Mon, 28 Mar 2011 14:47:11 +0200

dsa-nagios-checks (88) unstable; urgency=low

  * dsa-check-hpacucli
    - Also accept 'Unknown, 3.0GBPS' as a valid transfer speed in addition
      to '3.0GBPS, Unknown'.
    - accept 6.0Gbps for SAS disks.
    - add --ignore-transfer-speed option.
    - ignore the line for unassigned disks (patch by Emmanuel Lacour).
  * Add dsa-check-ups.
  * Add dsa-check-hpacucli-enclosure.
  * dsa-check-running-kernel:
    - check if 'strings' is installed and complain nicely if it isn't instead
      of falling over. [Uli Martens]
    - Make the check work with Ubuntu's kernel names (Alexander
      Reichle-Schmehl).
  * dsa-check-afs-*: add checks from Russ Allbery for monitoring our AFS
  * Add dsa-check-port-closed.
  * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore "N/A" DIMM
    status.
  * dsa-check-hpasm: Incorporate patch from Jan Wagner to ignore fan lines
    that do not say 'Yes' in the present-line.
  * dsa-check-udldap-freshness: Also check age of /var/lib/misc/passwd.db
    in addition to /var/lib/misc/thishost/passwd.tdb.
  * Add dsa-check-resolver.

 -- Peter Palfrader <weasel@debian.org>  Tue, 01 Mar 2011 18:10:25 +0100

dsa-nagios-checks (87) unstable; urgency=low

  [ Uli Martens ]
  * dsa-check-running-kernel:
    - Teach dsa-check-running-kernel about LZMA compressed kernel images.
    - Handle cases where a meta package depends on a list of packages
      (such as image and module package).

  [ Stephen Gran ]
  * dsa-check-apt-status: it's not an error to exit when we don't need to run
  * Update check-hpacucli to deal with dual domain and 6GBPS SAS

  [ Peter Palfrader ]
  * Add checks/dsa-check-backuppg.
  * dsa-check-mirrorsync: optionally allow some skew over mirror timestamps.
  * Add dsa-check-log-age-loghost.
  * dsa-check-zone-rrsig-expiration-many: also allow checking of geozones.
  * dsa-check-dnssec-delegation: allow multiple dirs to be checked.

  [ Martin Zobel-Helas ]
  * Add checks/dsa-checks-file.

 -- Martin Zobel-Helas <zobel@debian.org>  Fri, 23 Jul 2010 19:26:00 +0200

dsa-nagios-checks (86) unstable; urgency=low

  [ Peter Palfrader ]
  * Add dsa-check-raid-megaraid.
  * make samhain check go WARN, not CRITICAL.

  [ Stephen Gran ]
  * Add dsa-check-uptime

 -- Stephen Gran <sgran@debian.org>  Fri, 02 Apr 2010 16:55:51 +0100

dsa-nagios-checks (85) unstable; urgency=low

  [ Stephen Gran ]
  * dsa-update-apt-status: Fix bashism by making it a bash script
  [ Peter Palfrader ]
  * dsa-check-hpasm: Not all things where a temperature can be measured
    might be installed (e.g. a second CPU).  Don't do numeric computations
    on a "-" instead of numbers then.
  * dsa-check-hpasm: Support a --ps-no-redundant option.  If supplied
    then non-redundant power supply will not be a warning state.
  * dsa-check-hpasm: Support a --fan-no-redundant option.  If supplied
    then non-redundant fans will not be a warning state.
  * Add dsa-check-msa-eventlog.
  * add dsa-check-zone-rrsig-expiration (therefore recommend
    libnet-dns-sec-perl).
  * add dsa-check-zone-rrsig-expiration-many.
  * dsa-check-raid-aacraid: properly support beethoven's Adaptec AAC-RAID
    controller with a battery: "ZMM Optimal" is the way it says "optimal".
  * dsa-check-dabackup-server: check /etc/ssh/userkeys/root instead of
    /root/.ssh/authorized_keys.
  * add dsa-check-dnssec-delegation.
  * dsa-check-hpasm: Add --fan-high to not tread high fan speeds as a
    warning condition.
  * weak-ssh-keys-check: Check all keys in files in /etc/ssh/userkeys
    and /var/lib/misc/userkeys, not just the first.  (Also doesn't
    blow up if a file is empty.)

 -- Peter Palfrader <weasel@debian.org>  Mon, 22 Feb 2010 10:32:51 +0100

dsa-nagios-checks (84) unstable; urgency=low

  [ Peter Palfrader ]
  * dsa-check-mirrorsync: Handle case where we cannot parse a tracefile
    better (do not reference undefined values, properly exit with UNKNOWN).
  * dsa-check-mirrorsync: Fix counting of out-of-date mirrors.
  * dsa-check-dabackup-server: Handle wildcard entries (via the new ssh
    wrapper) in the authorized_keys files.  Such entries accept all
    backup-manager entries for their host, but they do not require one.
    As such we can just put all the hosts in the authkeys file regardless of
    whether we actually have backups configured for them.

  [ Stephen Gran ]
  * New check: dsa-check-hpasm
  * Release for new check

 -- Stephen Gran <sgran@debian.org>  Mon, 30 Nov 2009 22:10:46 +0000

dsa-nagios-checks (83) stable; urgency=low

  * Add dsa-check-cert-expire: Checks if a given cert on disk will expire
    soon.

 -- Peter Palfrader <weasel@debian.org>  Fri, 02 Oct 2009 20:22:42 +0200

dsa-nagios-checks (82) stable; urgency=low

  * dsa-check-raid-3ware: Learn about REBUILDING state for 3ware raid units.

 -- Peter Palfrader <weasel@debian.org>  Thu, 20 Aug 2009 13:48:43 +0200

dsa-nagios-checks (81) stable; urgency=low

  * dsa-check-raid-mpt: mpt-status returns non-zero exit code when
    it found degraded raid arrays.  Handle this correctly.

 -- Peter Palfrader <weasel@debian.org>  Fri, 07 Aug 2009 12:17:22 +0200

dsa-nagios-checks (80) stable; urgency=low

  * dsa-check-packages: In the short overview say "obs/loc" instead of
    just "obs" for local or obsolete packages.
  * dsa-update-apt-status: Introduce -f switch.

 -- Peter Palfrader <weasel@debian.org>  Wed, 22 Jul 2009 11:34:15 +0200

dsa-nagios-checks (79) stable; urgency=low

  * dsa-check-running-kernel: Correctly check *candidate* version
    of kernel metapackage for unsatisfied depends, not the latest
    metapackage (which might come from a non-default source).

 -- Peter Palfrader <weasel@debian.org>  Fri, 03 Jul 2009 20:07:13 +0200

dsa-nagios-checks (78) stable; urgency=low

  * dsa-check-raid-aacraid: tmp directory in /tmp,
  * dsa-check-raid-aacraid: unlink UcliEvt.log so tmpdir cleanup
    doesn't fail.

 -- Peter Palfrader <weasel@debian.org>  Sun, 28 Jun 2009 16:36:39 +0200

dsa-nagios-checks (77) stable; urgency=low

  * Add checks/dsa-check-raid-aacraid.

 -- Peter Palfrader <weasel@debian.org>  Sun, 28 Jun 2009 16:31:13 +0200

dsa-nagios-checks (76) stable; urgency=low

  * Ship with an /etc/nagios/obsolete-packages-ignore.d directory.

 -- Peter Palfrader <weasel@debian.org>  Sun, 14 Jun 2009 12:09:54 +0200

dsa-nagios-checks (75) stable; urgency=low

  * dsa-check-packages: Support ignore directories.
  * debian/control: Fix dup word in description.

 -- Peter Palfrader <weasel@debian.org>  Sun, 14 Jun 2009 12:01:00 +0200

dsa-nagios-checks (74) stable; urgency=low

  * -e is sufficient

 -- Stephen Gran <sgran@debian.org>  Thu, 21 May 2009 22:12:34 +0100

dsa-nagios-checks (73) stable; urgency=low

  * Er, new test needs to be executable

 -- Stephen Gran <sgran@debian.org>  Thu, 21 May 2009 21:17:27 +0100

dsa-nagios-checks (72) stable; urgency=low

  * Generalize puppet file age check and remove old one

 -- Stephen Gran <sgran@debian.org>  Thu, 21 May 2009 20:52:12 +0100

dsa-nagios-checks (71) stable; urgency=low

  * Update the kernel check to not complain when we can't trace back to a meta
    package name - this generally indicates a custom kernel that we're running
    on purpose.

 -- Stephen Gran <sgran@debian.org>  Tue, 19 May 2009 22:20:44 +0100

dsa-nagios-checks (70) XXstable; urgency=low

  * No longer check nrpe config in postinst - puppet fixes it for us anyway.
  * Only run weak keys check if there is no prior weak key status.
  * dsa-check-hpacucli: Slots need not be all numeric.
  * dsa-check-hpacucli: Spares can be active.
  * dsa-check-hpacucli: And SAS can be E too.

 -- Peter Palfrader <weasel@debian.org>  Sat, 18 Apr 2009 01:41:32 +0200

dsa-nagios-checks (69) unstable; urgency=low

  * Rename to dsa-nagios-checks.
  * Replaces/Conflicts dsa-nagios-nrpe-config.
  * Update description.
  * No longer install nrpe_dsa.cfg.
  * Move files into specific directories in source.

 -- Peter Palfrader <weasel@debian.org>  Tue, 31 Mar 2009 19:19:14 +0200

dsa-nagios-nrpe-config (68) unstable; urgency=low

  * dsa-update-apt-status: Ensure apt-get update is quiet even when stuff
    goes wrong.

 -- Peter Palfrader <weasel@debian.org>  Wed, 11 Feb 2009 21:59:55 +0100

dsa-nagios-nrpe-config (67) unstable; urgency=low

  * Minor tweak to dsa-check-packages:  reorder ok and obs(ign), change
    long text for obs(ign).

 -- Peter Palfrader <weasel@debian.org>  Wed,  4 Feb 2009 09:40:26 +0000

dsa-nagios-nrpe-config (66) unstable; urgency=low

  * Add dsa-check-packages
  * Make apt-status-check use dsa-check-packages.
  * And install obsolete-packages-ignore into etc/nagios.

 -- Peter Palfrader <weasel@debian.org>  Tue, 03 Feb 2009 20:39:01 +0100

dsa-nagios-nrpe-config (65) unstable; urgency=low

  * Add dsa-check-soas

 -- Peter Palfrader <weasel@debian.org>  Tue, 23 Dec 2008 23:11:19 +0000

dsa-nagios-nrpe-config (64) unstable; urgency=low

  * dsa-check-mirrorsync: make it work in embedded perl again.

 -- Peter Palfrader <weasel@debian.org>  Tue, 23 Dec 2008 22:59:06 +0000

dsa-nagios-nrpe-config (63) unstable; urgency=low

  * dsa-check-mirrorsync: print help if additional args are given (we don't
    support any)

 -- Peter Palfrader <weasel@debian.org>  Tue, 23 Dec 2008 22:14:44 +0000

dsa-nagios-nrpe-config (62) unstable; urgency=low

  * Add check_securitymirror by formorer.

 -- Peter Palfrader <weasel@debian.org>  Tue, 23 Dec 2008 21:59:47 +0000

dsa-nagios-nrpe-config (61) unstable; urgency=low

  * dsa-check-hpacucli: Do not create the 'Failed' array while checking if an
    entry is in there.  If it doesn't exist that's also good.

 -- Peter Palfrader <weasel@debian.org>  Mon, 06 Oct 2008 14:08:30 +0200

dsa-nagios-nrpe-config (60) unstable; urgency=low

  * Add dsa-check-raid-areca.

 -- Peter Palfrader <weasel@debian.org>  Wed, 01 Oct 2008 16:23:33 +0200

dsa-nagios-nrpe-config (59) unstable; urgency=low

  * apt-status-check: Ignore stderr during apt-get update.

 -- Peter Palfrader <weasel@debian.org>  Tue, 30 Sep 2008 19:58:36 +0200

dsa-nagios-nrpe-config (58) unstable; urgency=low

  * Rename dsa-check-da-in-aliases to dsa-check-config.
  * dsa-check-config: check if ldap.conf is configured correctly.

 -- Peter Palfrader <weasel@debian.org>  Fri, 26 Sep 2008 15:02:53 +0200

dsa-nagios-nrpe-config (57) unstable; urgency=low

  * dsa-check-hpacucli: Do not inspect drives in detail when they are
    listed as Failed in the overview already.

 -- Peter Palfrader <weasel@debian.org>  Wed, 24 Sep 2008 16:02:31 +0200

dsa-nagios-nrpe-config (56) unstable; urgency=low

  * fix dsa-check-samhain.
    sudo is not in $PATH.

 -- Martin Zobel-Helas <zobel@debian.org>  Mon, 22 Sep 2008 06:45:19 +0000

dsa-nagios-nrpe-config (55) unstable; urgency=low

  * And another one, weasel should sleep.

 -- Peter Palfrader <weasel@debian.org>  Mon, 22 Sep 2008 00:29:15 +0000

dsa-nagios-nrpe-config (54) unstable; urgency=low

  * dsa-check-dabackup-server fixes.

 -- Peter Palfrader <weasel@debian.org>  Mon, 22 Sep 2008 00:27:41 +0000

dsa-nagios-nrpe-config (53) unstable; urgency=low

  * Add dsa-check-dabackup-server.

 -- Peter Palfrader <weasel@debian.org>  Mon, 22 Sep 2008 00:19:28 +0000

dsa-nagios-nrpe-config (52) unstable; urgency=low

  * The nagios _check_ package should probably not be the one that
    depends on the stuff we want on most or all hosts, thus removing
    dependency on samhain, which should probably get pulled in via
    debian.org.

 -- Peter Palfrader <weasel@debian.org>  Sun, 21 Sep 2008 23:41:01 +0000

dsa-nagios-nrpe-config (51) unstable; urgency=low

  * Add check for samhain.

 -- Martin Zobel-Helas <zobel@samosa.debian.org>  Sat, 20 Sep 2008 07:29:23 +0000

dsa-nagios-nrpe-config (50) unstable; urgency=low

  * dsa-check-hpacucli: Handle 'pd all show' output with failed arrays.

 -- Peter Palfrader <weasel@debian.org>  Sat, 09 Aug 2008 11:39:55 +0200

dsa-nagios-nrpe-config (49) unstable; urgency=low

  * dsa-check-hpacucli: Learn correct transfer speed for Ultra 3 Wide (160mb/s)

 -- Peter Palfrader <weasel@debian.org>  Wed, 23 Jul 2008 00:56:54 +0200

dsa-nagios-nrpe-config (48) unstable; urgency=low

  * Don't just print the sudoers lines to stdout, tell the admin to add them
    also.

 -- Peter Palfrader <weasel@debian.org>  Tue, 22 Jul 2008 21:25:56 +0000

dsa-nagios-nrpe-config (47) unstable; urgency=low

  * dsa-check-hpacucli: Check transfer speed of disks.

 -- Peter Palfrader <weasel@debian.org>  Tue, 22 Jul 2008 23:14:50 +0200

dsa-nagios-nrpe-config (46) unstable; urgency=low

  * Move apt status update from cron.daily to usr/sbin/dsa-update-apt-status.
  * Move script calls from cron.daily to cron.d @daily and @reboot.
  * Introduce hourly runs for dsa-update-apt-status that happen if the system
    changed in the meantime, that is if /var/lib/dpkg/status or
    /var/cache/apt/pkgcache.bin are newer than the status file.
    Also run if the status file does not exist, or if the last apt-get update
    call failed, or if the last run was more than a day ago.
  * No longer do @daily runs of dsa-update-apt-status

 -- Peter Palfrader <weasel@debian.org>  Sun, 06 Jul 2008 11:51:27 +0200

dsa-nagios-nrpe-config (45) unstable; urgency=low

  * Add apt upgrades check.

 -- Peter Palfrader <weasel@debian.org>  Tue, 20 May 2008 22:01:07 +0000

dsa-nagios-nrpe-config (44) unstable; urgency=low

  * Fix ssh-dss detection.  It need not be at the start of a line
    (think >from="1.2.3.4" ssh-dss< ...).

 -- Peter Palfrader <weasel@debian.org>  Mon, 19 May 2008 14:34:23 +0000

dsa-nagios-nrpe-config (43) unstable; urgency=low

  * Depend on ruby.

 -- Peter Palfrader <weasel@debian.org>  Mon, 19 May 2008 14:19:10 +0000

dsa-nagios-nrpe-config (42) unstable; urgency=low

  * weak-ssh-keys-check: Ignore empty lines in authorized-keys files.
  * weak-ssh-keys-check: Handle servers not doing DSA in from_ssh_host().
  * Run weak-ssh-keys-check on install.

 -- Peter Palfrader <weasel@debian.org>  Mon, 19 May 2008 14:05:10 +0000

dsa-nagios-nrpe-config (41) unstable; urgency=low

  * Add dsa-check-statusfile.
  * Add weak-ssh-keys-check to be run from cron.daily.  Depend on
    libberkeleydb-perl and dsa-ssh-weak-keys now.
  * Remove up /var/cache/dsa/nagios/weak-ssh-keys in postrm purge.

 -- Peter Palfrader <weasel@debian.org>  Mon, 19 May 2008 15:55:43 +0200

dsa-nagios-nrpe-config (40) unstable; urgency=low

  * Teach dsa-check-hpacucli about rebuilding.

 -- Peter Palfrader <weasel@debian.org>  Fri,  9 May 2008 12:55:07 +0000

dsa-nagios-nrpe-config (39) unstable; urgency=low

  * Add dsa-check-hpacucli.
  * Suggest hpacucli.

 -- Peter Palfrader <weasel@debian.org>  Wed,  7 May 2008 19:54:55 +0000

dsa-nagios-nrpe-config (38) unstable; urgency=low

  * Try harder to find version string.

 -- Peter Palfrader <weasel@debian.org>  Mon,  5 May 2008 17:48:42 +0000

dsa-nagios-nrpe-config (37) unstable; urgency=low

  * dsa-check-running-kernel: also check /boot/vmlinux-`uname -r`
  * Depend on binutils for string(1).

 -- Peter Palfrader <weasel@debian.org>  Mon,  5 May 2008 17:41:13 +0000

dsa-nagios-nrpe-config (36) unstable; urgency=low

  * Add dsa-check-running-kernel

 -- Peter Palfrader <weasel@debian.org>  Mon,  5 May 2008 17:11:54 +0000

dsa-nagios-nrpe-config (35) unstable; urgency=low

  * dsa-check-raid-mpt

 -- Peter Palfrader <weasel@debian.org>  Tue, 29 Apr 2008 12:57:50 +0000

dsa-nagios-nrpe-config (34) unstable; urgency=low

  * dsa-check-raid-3ware

 -- Peter Palfrader <weasel@debian.org>  Thu, 24 Apr 2008 19:37:47 +0000

dsa-nagios-nrpe-config (33) unstable; urgency=low

  * Add dsa-check-raid-dac960

 -- Peter Palfrader <weasel@debian.org>  Thu, 24 Apr 2008 19:20:57 +0000

dsa-nagios-nrpe-config (32) unstable; urgency=low

  * Add dsa-check-udldap-freshness.

 -- Peter Palfrader <weasel@debian.org>  Wed, 16 Apr 2008 07:39:21 -0400

dsa-nagios-nrpe-config (31) unstable; urgency=low

  * dsa-check-dabackup: Use last time's log file if backup is currently running.

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 17:37:54 -0400

dsa-nagios-nrpe-config (30) unstable; urgency=low

  * dsa-check-raid-sw: cleaner output.

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 17:05:17 -0400

dsa-nagios-nrpe-config (29) unstable; urgency=low

  * dsa-check-dabackup: terser output.

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 13:09:07 -0400

dsa-nagios-nrpe-config (28) unstable; urgency=low

  * dsa-check-dabackup: ignore .bak files in confdir.

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 12:23:25 -0400

dsa-nagios-nrpe-config (27) unstable; urgency=low

  * Change OK text when da-backup not installed.

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 12:19:00 -0400

dsa-nagios-nrpe-config (26) unstable; urgency=low

  * dsa-check-dabackup: Warn if installed but no backups configured.

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 12:13:30 -0400

dsa-nagios-nrpe-config (25) unstable; urgency=low

  * Install dsa-check-dabackup

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 12:05:11 -0400

dsa-nagios-nrpe-config (24) unstable; urgency=low

  * Check for dsa-check-backup sudoers entry

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 11:48:48 -0400

dsa-nagios-nrpe-config (23) unstable; urgency=low

  * Add dsa-check-dabackup

 -- Peter Palfrader <weasel@debian.org>  Mon, 14 Apr 2008 10:56:32 -0400

dsa-nagios-nrpe-config (22) unstable; urgency=low

  * Add a very easy dsa-check-da-in-aliases.

 -- Peter Palfrader <weasel@debian.org>  Fri, 11 Apr 2008 10:25:54 -0400

dsa-nagios-nrpe-config (21) unstable; urgency=low

  * Add dsa-check-raid-sw.

 -- Peter Palfrader <weasel@debian.org>  Thu,  3 Apr 2008 06:22:44 -0400

dsa-nagios-nrpe-config (20) unstable; urgency=low

  * Do away with a new changelog entry and version for every build of the
    package - it floods us with useless commit mails - and just
    increase the version to $TIMESTAMP in the build area.

 -- Peter Palfrader <weasel@debian.org>  Thu,  3 Apr 2008 05:38:27 -0400

dsa-nagios-nrpe-config (1) unstable; urgency=low

  * Initial release.

 -- Peter Palfrader <weasel@debian.org>  Wed,  2 Apr 2008 22:24:12 +0200