Changelog for monit-doc-5.34.0-1.1.noarch.rpm :

* Thu Aug 15 2024 marec - Update to version 5.34.0 New:
* Added the timeout option to the exec action. It can be set either globally (in the set limit statement using the execTimeout option) or locally (using the timeout seconds in the exec action). The default timeout is 0 (no limit), to keep the original behaviour. Thanks to Lutz Mader.
* Issue #1074: Added a hardlink test to file, directory and fifo checks. Thanks to Lutz Mader. Example: check directory upload with path /data/upload if hardlink > 32000 then alert
* Issue #1070: Added the system boot time and uptime to the XML interface. Thanks to Lutz Mader.
* Added support to add Monit to M/Monit hostgroup (requires M/Monit 4.2.2 or later). Example: set mmonit https://monit:mypasswordAATTmmonit.foo.bar:8443/collector with hostgroups [ Oslo, \"Mail servers\" ]
* Add support for checking the output of a program for changes. This can be used to alert on changes of system properties, e.g. ip route or udisksctl status. Thanks to Christian Goettsche. Example: check program myscript with path /usr/local/bin/myscript.sh if content changed then alert if content not changed then alert else ignore
* Implemented ignore functionality within the test success action, enabling the suppression of alerts when the check returns to a successful state. Thanks to Christian Goettsche.
* Set the header X-Content-Type-Options to prevent MIME type sniffing. Thanks to Christian Goettsche.
* Added support for debugging TLS/SSL connections with Wireshark. It is now possible to set the SSLKEYLOGFILE= environment variable when starting Monit, to log the master secret to a file, which can be used by Wireshark in \"Settings -> Protocols -> TLS -> (Pre)-Master-Secret log filename\". Note: The SSLKEYLOGFILE functionality is enabled only in the monit debug mode (when monit was started with the -v option). Fixed:
* Issue #1082: Wrong error message for the uptime test. Thanks to Lutz Mader.
* Disable SSL session renegotiation in the Monit HTTP interface (CVE-2011-1473).
* Monit reported wrong number of CPUs in the VMWare virtual host in Debian 12.x
* Issue #1086: The HTTP protocol test may return false error HTTP error: invalid chunk size if the HTTP response contained header with more then 511 bytes. We have increased the limit to 8192 bytes per header and will report response header exceeded maximum size error if the HTTP response contains longer header.
* When the monit ID is generated in first start and the system is shut down before the file was stored to the filesystem, an empty monitid file may be created. Thanks to Alexander Dahl for fix.
* The SSL connection can be sporadically interrupted.
* Issue #1101: Updated configuration examples for PAM in the Monit manual. Thanks to Lutz Mader.
* The network test was failing on WSL (Windows subsystem for Linux).
* Make network interface speed statistics optional (monit used to report link failure when statistics were not available) and do not report/check if statistics are not available.
* Wed Sep 06 2023 marec - Update to version 5.33.0 New:
* Added click-jacking protection headers to Monit HTTP GUI (the SAMEORIGIN iframe is allowed). Fixed:
* Issue #1035: If the start, stop or restart program statement contains the equal sign, which is not followed by a space character, the configuration is not parsed correctly.
* Issue #1047: If the MariaDB server doesn\'t allow access to the host, from which Monit test is running, Monit reported: Invalid handshake packet sequence id -- not MySQL protocol.
* Add the missing responsetime option to the ping test.
* Tue Apr 26 2022 Michael Ströder - Update to version 5.32.0 (too many changes to be listed here, see https://mmonit.com/monit/changes/)
* Sun Oct 25 2020 Martin Hauke - Update to version 5.27.1 Fixed:
* Require that the program in a \'check program\' statement exist on Monit startup.
* Linux: Monit procmatch failed to show all matching processes if a non-root user ran Monit.
* The CAP_SYS_RESOURCE capability was needed to be able to monitor filedescriptors usage of other processes if Monit was not started as root.
* Remove trailing white space from collected process name
* Fixed a race condition in Monit\'s HTTP interface on reload when SIGHUP were sent many times to the Monit process.
* Monit could crash when sending heartbeat status to M/Monit.
* If SSL certificate verification failed and certificate valid days test was enabled, Monit could report the following false positive: certificate expiry in 0 days matches check limit. Changed:
* Use ISO 8601 format timestamp in log files.
* Tue Jun 30 2020 Martin Hauke - Update to version 5.27.0 New features:
* The SSL version: auto now defaults to TLSv1.2 and TLSv1.3 only.
* Support for MySQL TLS encryption.
* Support for MySQL 8.x default authentication method, caching_sha2_password.
* The username in the mysql protocol test was limited to 16 bytes, this limit was removed.
* Linux: Support for monitoring a process\'s filedescriptor usage.
* Linux, OpenBSD, FreeBSD, DragonflyBSD, MacOS: Added support for monitoring of system-wide filedescriptors usage.
* You can now set a list of allowed TLS protocol
* Optionally split certificate chain and key for the Monit HTTPS interface.
* Linux: Enable monitoring of per-process disk read and write I/O operations.
* Linux: Added generic per-process I/O activity monitoring
* Linux: monitor detailed CPU statistics for nice, hardirq, softirq, steal, guest, guestnice.
* FreeBSD, OpenBSD, NetBSD, DragonflyBSD MacOS: Added CPU nice and interrupt usage statistics.
* Linux: Added support for VxFS filesystem statistics.
* Added year to the timestamp when monit logs to its own log file
* Add STARTTLS support to the IMAPS protocol test on port 143. Fixes:
* Issue #519: Monit could crash if a file check with restart on content match was used and this file had dependant services.
* Issue #867: If Monit was linked with musl libc, it could crash when executing programs. Thanks to Rich Felker for report.
* Monit incorrectly added CPU wait% to system CPU usage (the CPU is idle when it\'s in the wait state, waiting for the I/O to complete).
* The per-process I/O statistics on Linux, AIX, DragonflyBSD, NetBSD and Solaris always displayed 0 activity.
* Issue #843: Linux: Monit reported wrong memory usage in LXC container if the ZFS filesystem was used. Monit now use MemAvailable on Linux when calculating memory usage for more accurate statistics. Thanks to Joe LeVeque for patch.
* Issue #831: The HTTP protocol test returned unknown transfer encoding HTTP error if either the content or checksum test was used and the HTTP server didn\'t set the Content-Length header nor used chunked transfer encoding.
* Issue #880: If Monit was linked with AddresSanitizer, it could crash when it generates an MD5 hash.
* Issue #879: The HTML interface didn\'t escape strings that are part of Monit\'s configuration file.
* Issue #872: Monit\'s procmatch table can now display pids with up to 8 digits. Previously, pids where truncated after 5 digist
* Issue #891: The repeat option to an action was limited to 256 cycles.
* Issue #851: Linux and AIX: The length of the string that describes the process name and its arguments was limited to 4kB, so monit procmatch might not find the process if the string was longer and unique after 4Kb. This limit has been removed on Linux and raised on AIX to 8kB.
* Issue #840: Network check: superfluous alerts if link is down.
* Issue #886: Monit\'s command-line options are now position independent.
* If Monit is linked with AddresSanitizer and a custom configuration file was passed via the -c option, monit could crash.
* MQTT protocol test.
* Issue #907: The onreboot nostart had no effect when a service was newly added to Monit\'s configuration or the statefile was removed.
* The PostgreSQL test was flapping with the following error if connection via unix socket was used: PGSQL: connection terminator write error -- Broken pipe- Update patch:
* monit-better_default_monitrc.patch
* Thu Aug 08 2019 Martin Hauke - Introduce monit-bash-completion subpackage- Update to version 5.26.0 New features:
* Allow any characters including space in a service name if the name is enclosed in quotes.
* The load average test has a new option; per core to test load average per CPU core. That is, loadavg/cores. Fixes:
* Wrong free value (-1) on filesystem with missing free inodes statistics (such as CEPH).
* Start delay is now in effect just on first Monit start after machine reboot.
* TLSv1.3 support detection during compile time- Update to version 5.25.3 Fixes:
* The HTTP protocol test may log SSL read errors and the content/checksum test may fail when the server sends chunked encoded response.
* $HOST doesn\'t work in the \"name\" part of the \"from:\" in mail-format message.
* The \"stop\" action for \"check program\" had no effect if the \"every\" statement was used to skip monitoring in some cycles.
* if the ping test target is a hostname which resolves to multiple IPs, Monit didn\'t try the next IP if the first one failed and returned error.
* Monit may crash if \"unmonitor\" or \"stop\" action was triggered by some test
* Monit CLI status command doesn\'t work if only read-only credentials is present in the \'set httpd\' statement.
* Radius protocol test regression from 5.25.2.
* check process: The exec action\'s environment contains invalid value for MONIT_PROCESS_
* variables.
* The CPU user/system/wait statistics may show negative value if the system counter jumps back or wraps.
* XSS vulnerabilitty: HTML escape the log file content when viewed via Monit GUI. Thanks to Zack Flack for report.
* Buffer over-read vulnerability in URL decoding for specially crafted URLs.- Update to version 5.25.2 New features:
* Added a bash completion script for monit command-line. Fixes:
* If the space usage test was used with an absolute value and the monitored filesystem was not mounted on boot, monit would stop with an error during configuration parsing.
* Slow Monit reload when triggered in the middle of a poll cycle.
* If a process is terminated when Monit collects process information, calculation of resource usage could become incorrect.
* Collect system statistics even if process statistics failed (independent).
* Reduce the state file related overhead
* Thu Dec 14 2017 chrisAATTcomputersalat.de- remove double Req of %insserv_prereq
* Wed Dec 13 2017 chrisAATTcomputersalat.de- fix for boo#1072692
* monit: unable to start
* add systemd monit.service file
* still support SysVinit (SLE_11)- update to 5.25.1
* https://mmonit.com/monit/changes/- rebase patches
* monit-better_default_monitrc.patch
* monit-rundir.patch- format specfile- more use of macros
* Thu Nov 23 2017 rbrownAATTsuse.com- Replace references to /var/adm/fillup-templates with new %_fillupdir macro (boo#1069468)
* Fri Apr 21 2017 liedkeAATTrz.uni-mannheim.de- update to 5.22: + New: Linux: Added support for monitoring ZFS disk activity. + New: Added option to explicit specify if the HTTP method HEAD or GET should be used in a HTTP protocol test. If not specified, HEAD will be used unless a content or a checksum test is also specified, in which case GET is used instead. The default is normally what you want, but now you have the option to specificially use GET instead of HEAD. + New: File, Directory, Fifo checks: Added support for explicit testing access, change and modification time properties. If the type is not specified, the original timestamp test is performed, which checks the latest of ctime and mtime. It is also possible to use newer and older operators in the test now. + New: Renamed the statement, set logfile to set log . + Fixed: Linux: If the monitored filesystem was not found in /proc/diskstat, Monit could leak filedescriptors. + Fixed: Solaris on SPARC: Monit didn\'t trigger an event if a protocol test failed. + Fixed: Systemd template for Monit: Added StandardOutput=null option to prevent systemd to duplicate Monit log output. + Fixed: Monit cross-compilation + Fixed: configure --without-zlib + Fixed: If the connection test required STARTTLS, the certificate valid days test was broken. + Fixed: Compile on MacOSX 10.6.x - 10.9.x. + Fixed: HTTP protocol test: Allow using a request string in addition to path, to monitor e.g. a HTTP proxy. + Fixed: If connection or ping test repetition is set, log partial failures with warning priority instead of error. + Fixed: Linux: Support rootfs ramdisk. + Fixed: Connection retry was broken and performed the test only once with no retry on error. + Fixed: Linux: Subtract ZFS ARC size from the system memory usage. + Fixed: SSL certificate validity test and checksum test didn\'t work for self-signed certificates.