Uploaded image for project: 'ZABBIX FEATURE REQUESTS'
  1. ZABBIX FEATURE REQUESTS
  2. ZBXNEXT-1085

restrict available checks on the agent side

    XMLWordPrintable

Details

    • Team C
    • Sprint 58 (Nov 2019), Sprint 59 (Dec 2019), Sprint 60 (Jan 2020)
    • 2.125

    Description

      As a security measure, Zabbix agent provides a configuration parameter EnableRemoteCommands to restrict system.run[] checks.

      However, system.run[] is not the only way to compromise security through Zabbix agent. For instance, a malicious administrator can potentially query vfs.file.contents[] on a user's workstation to peek on files in the system that contain cached passwords.

      Thus, it would be nice if there would be a way to restrict availability of arbitrary checks on the agent, not just system.run[].

      Attachments

        Issue Links

          causes

          Problem report - Problem report ZBX-17367 Deprecated flag EnableRemoteCommands is still required to use system.run keys

          • Trivial - Cosmetic problem like misspelt words or misaligned text.
          • Open

          Problem report - Problem report ZBX-17699 Unsupported item key error on manual script execution when item key is denied by DenyKey

          • Trivial - Cosmetic problem like misspelt words or misaligned text.
          • Closed

          Problem report - Problem report ZBX-17700 Enabling remote commands on Zabbix agent is very hard and misleading

          • Trivial - Cosmetic problem like misspelt words or misaligned text.
          • Closed
          is duplicated by

          Change Request - An Change Request or enhancement Improvement to an existing feature or task. ZBXNEXT-1681 Restrict item keys offered by Zabbix-Agent

          • Critical - Crashes, loss of data, severe memory leak.
          • Closed

          Incident report - Incident report ZBX-11290 Zabbix agent execute command

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed
          mentioned in

          Page Loading...

          Page Loading...

          Page Loading...

          Activity

            People

              atumilovics Andrejs Tumilovics
              asaveljevs Aleksandrs Saveljevs
              Votes:
              8 Vote for this issue
              Watchers:
              12 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: