Permalink
Commits on Sep 6, 2012
  1. Rebuild for squeeze-backports.

    h01ger committed Sep 6, 2012
Commits on Sep 3, 2012
  1. release as 2.0.6-1 to sid

    h01ger committed Sep 3, 2012
  2. set urgency=high as this upload fixes several security problems. It w…

    …on't migrate without an unblock anyway
    h01ger committed Sep 3, 2012
  3. * debian/control:

      - make munin-async depend on munin-node for now.
    h01ger committed Sep 2, 2012
Commits on Sep 1, 2012
  1. debian/rules: workaround bug in upstream Makefile targets to move /va…

    …r/lib/async from munin-node package to munin-async.
    h01ger committed Sep 1, 2012
  2. munin-node.postinst: don't create /var/lib/munin/plugin-state anymore…

    … as munin-node now uses /var/lib/munin-nodes/plugin-state and subdirs and handles creation by itself.
    h01ger committed Sep 1, 2012
  3. start preparing 2.0.6-1

    h01ger committed Sep 1, 2012
Commits on Aug 31, 2012
  1. update ChangeLog for 2.0.6

    steveschnepp committed Aug 31, 2012
  2. update: reenable _node_read_fast

    This commit reverts 71f7ccb since it got really fixed
    in f1002a9, 3d587bb
    steveschnepp committed Aug 31, 2012
  3. Merge branch 'devel'

    steveschnepp committed Aug 31, 2012
  4. plugin: revert removal of munin_graph field

    We reverted to cron graphing in d8267b8.
    The munin_stats plugin should then still report graph_values.
    
    This reverts commit f24b0ed.
    This reverts commit 4693bc3.
    steveschnepp committed Aug 31, 2012
  5. async: allow any good-looking-enough file in spool

    6ae498b and
    64300ea are fixes to allow more chars to the
    sanity-check mask.
    
    Let's allow any good-looking-enough file as the spool dir should be internal
    enough not to care much about bad filenames
    steveschnepp committed Aug 31, 2012
  6. We probably also want to allow : in spool filenames

    Peter Palfrader committed with steveschnepp Aug 31, 2012
  7. debian: adding default for DBDIRNODE

    In 780634c we introduced the new directory
    steveschnepp committed Aug 30, 2012
Commits on Aug 30, 2012
  1. node: fix for chown that requires numeric uids

    In 780634c we introduced some bugs, and commit
    6183662 wasn't complete.
    steveschnepp committed Aug 30, 2012
  2. release to experimental

    h01ger committed Aug 30, 2012
  3. plugins: fix for uninitialized $MUNIN_VERSION

    Closes: D#686154
    steveschnepp committed Aug 30, 2012
  4. prepare upload to experimental

    h01ger committed Aug 30, 2012
Commits on Aug 29, 2012
  1. plugins: use runtime $ENV{MUNIN_PLUGSTATE}

    Since 780634c, the plugin state dir get
    resolved at runtime for security issues. The old behavior was using a
    compile-time resolution.
    steveschnepp committed Aug 29, 2012
  2. node: more secure state file handling

    Currently, plugins which run as root mix their state files in the same
    directory as non-root plugins. The state directory is owned by munin:munin and
    is group-writable. Because of these facts, it is possible for an attacker who
    operates as user munin to cause a root-run plugin to run arbitrary code as
    root.
    
    This commit introduces :
    - a new plugin state directory root, owned by uid 0
    - each plugin runs in its own UID plugin state directory, owned by the said UID.
    
    Closes: #1234, D#679897, R#849830, CVE-2012-3512
    steveschnepp committed Aug 29, 2012
Commits on Aug 28, 2012
  1. update/spoolfetch: disable _node_read_fast

    When munin-async doesn't have any data to send, it just emits ".\n".
    This is valid an the expected behavior. But as munin-update expects "\n.\n", it
    just hangs here.
    
    This commit reverts to the old _node_read to quick fix the bug.
    steveschnepp committed Aug 28, 2012
  2. ignoring VI swapfiles

    steveschnepp committed Aug 28, 2012