View Source

h1. Problem

Several security issues have been logged against the older version of Nagios that has been included in GroundWork Monitor. While these are generally difficult to trigger, and the vectors for some of them are not even available in the GroundWork context, it seemed sensible to provide an upgrade to the latest Nagios release (GroundWork internal case GWMON-12847) to assuage any concerns.

Separately from the Nagios version itself, while developing the upgrade, we noticed a very small window of opportunity still existed for loss of data received by the Bronx event broker used by GroundWork Monitor, right around the time that Nagios gets restarted. That window has been closed with this upgrade (GroundWork internal case GWMON-10412).

This patch was designed to be compatible with GWME-7.1.1, and is referred to here [GWME-7.1.1-4 - Nagios 4.3.1|SUPPORT:GWME-7.1.1-4 - Nagios 4.3.1].

h1. Solution

Nagios and its related CGI programs and associated artifacts are replaced with the upgraded versions. The Bronx event broker module is replaced with a version that adapts to changes in the Nagios internal data structures. A few small adjustments are made in the Monarch configuration code to adapt to this new Nagios release.

h2. Installation

*{_}Step 1{_}*: Download the patch files.

{attachments:patterns=TB7.1.1-4.tgz}

*{_}Step 2{_}*: Decompress the install script in a location that is accessible, and make it executable.

{noformat}
tar zxvf TB7.1.1-4.tgz
chmod +x TB7.1.1-4_install
{noformat}

*{_}Step 3{_}*: Place the {{groundwork-7.1.1-nagios-4.3.1-upgrade-files.tar.gz}} file in the {{/tmp}} directory so the install script knows how to find it.

*{_}Step 4{_}*: Stop Nagios.

{noformat}
service groundwork stop nagios
{noformat}

*{_}Step 5{_}*: Run the install script, and respond to the prompts.

{noformat}
./TB7.1.1-4_install
{noformat}

*{_}Step 6{_}*: Start Nagios.

{noformat}
service groundwork start nagios
{noformat}

h2. Uninstallation

*{_}Step 1{_}*: Make the uninstall script executable.
{noformat}
chmod +x TB7.1.1-4_uninstall
{noformat}

*{_}Step 2{_}*: Stop Nagios.

{code}
service groundwork stop nagios
{code}

*{_}Step 3{_}*: Run the uninstall script, and respond to the prompts.

{noformat}
./TB7.1.1-4_uninstall
{noformat}

*{_}Step 4{_}*: Start Nagios.

{noformat}
service groundwork start nagios
{noformat}