Script 'mail_helper' called by obssrc Hello community, here is the log from the commit of package cacti.17154 for openSUSE:Leap:15.2:Update checked in at 2021-11-15 10:06:52 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Leap:15.2:Update/cacti.17154 (Old) and /work/SRC/openSUSE:Leap:15.2:Update/.cacti.17154.new.1890 (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "cacti.17154" Mon Nov 15 10:06:52 2021 rev:1 rq:930402 version:1.2.19 Changes: -------- New Changes file: --- /dev/null 2021-10-14 08:13:55.193858881 +0200 +++ /work/SRC/openSUSE:Leap:15.2:Update/.cacti.17154.new.1890/cacti.changes 2021-11-15 10:06:52.884360131 +0100 @@ -0,0 +1,2738 @@ +------------------------------------------------------------------- +Sat Nov 6 16:22:34 UTC 2021 - Andreas Stieger <[email protected]> + +- cacti 1.2.19: + * Further fixes for grave character security protection (boo#1192408) + * Fix Over aggressive escaping causing menu visibility issues on Create Device page + * Add SHA256 and AES256 security levels for SNMP polling + * Import graph template(Preview Only) show color_id new value as a blank area + * Fix Editing graphs errors due to missing sequence + * Fix 2hen hovering over a Tree Graph, row shows same highlighting as Graph Edit screen + * Fix 2hen RealTime is not active, console errors may appear + * Fix race conditions may occur when multiple RRDtool processes are running + * Fix errors creating graphs from templates + * Fix errors when duplicating reports + * Fix Boost may be blocked by overflowing poller_output table + * Fix Template import may be blocked due to unmet dependency warnings with snmp ports + * Fix Newer MySQL versions may error if committing a transaction when not in one + * Fix SNMP Agent may not find a cache item + * Fix Correct issues running under PHP 8.x + * Fix When polling is disabled, boost may crash and creates many arch tables + * Fix When poller runs, memory tables may not always be present + * Fix Timezones may sometimes be incorrectly calculated + * Fix Allow monitoring IPv6 with interface graphs + * Fix When a data source uses a Data Input Method, those without a mapping should be flagged + * Fix When RRDfile is not yet created, errors may appear when displaying the graph + * Fix Cacti missing key indexes that result in Preset pages slowdowns + * Fix Data Sources page shows no name when Data Source has no name cache + * Fix db_update_table function can not alter table from signed to unsigned + * Fix data remains in poller_output table even if it's flushed to rrd files + * Fix Parameter list for lib/database.php:db_connect_real() is not correct in 3 places + * Fix Offset is a reserved word in MariaDB 10.6 affecting Report + * Fix Rendering large trees slowed due to lack of permission caching + * Fix Error on interpretation of snmpUtime, when to big + * Fix Applying right axis formatting creates an error-image + * Fix Unable to Save Graph Settings from the Graphs pages + * Fix Graph Template Cache is nullified too often when Graph Automation is running + * Fix When Adding a Data Query to a Device, no Progress Spinner is shown + * Fix New Browser Breaks Plugins that depend on non UTC date time data + * Fix errors when testing remote poller connectivity + * Fix errors when renaming poller + * Fix Removing spikes by Variance does not appear to be working beyond the first RRA + * Fix LDAP API lacks timeout options leading to bad login experiences + * Add a normal/wrap class for general use + * Limit File Types available for Template Import operations + * Fix Cacti does not provide an option of providing a client side certificate for LDAP/AD authentication + * Support Stronger Encryption Available Starting in Net-SNMP v5.8 + * Allow Cacti to use multiple possible LDAP servers + * Add a 15 minute polling/sampling interval + * Provide additional admin email notifications + * Add warnings for undesired changes to plugin hook return values + * When creating a Graph, make testing the Data Sources optional by Template + * Update phpseclib to 2.0.33 + * Update jstree.js to 3.3.12 + * Improve performance of Cacti poller on heavily loaded systems + * MariaDB recommendations need some tuning for recent updates + +------------------------------------------------------------------- +Sat Jul 10 06:40:29 UTC 2021 - Andreas Stieger <[email protected]> + +- cacti 1.2.18: + * CVE-2020-14424: Lack of escaping on template import can lead to + XSS exposure under 'midwinter' theme (boo#1188188) + * Real time graphs can expose XSS issue + +------------------------------------------------------------------- +Wed May 5 18:58:50 UTC 2021 - Andreas Stieger <[email protected]> + +- cacti 1.2.17: + * Fix incorrect handling of fields led to potential XSS issues + * CVE-2020-35701: Fix SQL Injection vulnerability (boo#1180804) + * Fix various XSS issues with HTML Forms handling + * Fix handling of Daylight Saving Time changes + * Multiple fixes and extensions to plugins + * Fix multiple display, export, and input validation issues + * SNMPv3 Password field was not correctly limited + * Improved regular expression handling for searcu + * Improved support for RRDproxy + * Improved behavior on large systems + * MariaDB/MysQL: Support persistent connections and improve + multiple operations and options + * Add Theme 'Midwinter' + * Modify automation to test for data before creating graphs + * Add hooks for plugins to show customize graph source and customize + template url + * Allow CSRF security key to be refreshed at command line + * Allow remote pollers statistics to be cleared + * Allow user to be automatically logged out after admin defined + period + * When replicating, ensure Cacti can detect and verify replica + servers + +------------------------------------------------------------------- +Fri Dec 18 17:35:23 UTC 2020 - Andreas Stieger <[email protected]> + +- fix httpd startup errors due to mismatched configuration + directives boo#1175314 + +------------------------------------------------------------------- +Thu Dec 3 14:08:39 UTC 2020 - Paolo Stivanin <[email protected]> + +- cacti 1.2.16: + * When generating a report, the Cascade to Branches function does not as expected + * When viewing graphs, automatic refresh so not always work as expected + * Realtime graph pop up counter bug + * Undefined variable errors may occur when creating a new datasource + * The cli-based installer does not exit with a non-zero exit code when error occurs + * When an export is complete, sometimes the progress bar remains + * When enabling many devices, a threshold can be reached causing a slowdown in the process + * When performing actions against Devices, replicated device information could sometimes be lost + * When using API to rename a tree node, backtrace may be incorrectly shown + * When searching, valid pages can sometimes be shown as empty by ddb4github + * When exporting data from graphs, not all data was properly included + * Graph Templates filter is not updated after new graph created by ddb4github + * Username and password on the login page is not visible in Classic theme + * Improve wording of concurrent process and thread settings + * Location filter should remove blank entries by ddb4github + * When syncing data collectors, a reindex event may be triggered unnecessarily + * Automation Networks allows discovery of invalid IP addresses + * When changing permissions of the current user, they don't take effect immediately + * When reindexing a device, an incorrect page was sometimes displayed + * When repairing database, audit_database.php does not add missing columns + * Log page should not be empty if no log info exists + * During upgrade, there are times when realms can be duplicated leading to SQL errors + * When using ping.php, UDP response times are not interpreted properly by hypnotoad + * Improve warning you get when attempting to view a log file you don't have access to + * When replicating files, scripts are not marked as executable + * When creating plugin tables, collation is not set properly + * Update c3.js to version 0.7.20 + * Update Chart.js to version 2.9.4 + * Update phpseclib to version 2.0.29 + * Update PHPMailer to version 6.1.8 + * Use LSB shebang notation for cli scripts + * Add support for cactid daemon based launcher + * Add ability to hide the Graph Drilldown icons by datatecuk + * Add hooks for plugins to show custom Graph Source and custom Template URL (List View) + +------------------------------------------------------------------- +Wed Nov 11 18:07:46 UTC 2020 - Andreas Stieger <[email protected]> + +- cacti 1.2.15, fixing the following bugs: + * When editing Maximum OIDs Per Get Request, blank value can cause errors + * Boost may run more often than it should + * Recache Event Loop can cause Interface Graphs to show gaps + * When searching Graph Tree's, non matching devices remain visible + * Page validation errors may occur when opening real time graphs + * External Links do not always open if they are still open from previous usage + * Cultural changes to various word usage + * Replicate deleted device status instead of poller sync + * Description field allows more characters entered than is stored + * When installing or upgrading, LDAP functions may not always be included properly + * Unable to remove discovered device + * When installing or upgrading, PHP recommendations may not always return a valid value + * Graph Templates has duplicate SQL delete statement + * When syncing to remote poller, missing function errors may occur + * When removing devices from remote pollers, devices may reappear without details + * When removing devices, array errors may sometimes be recorded + * Variable injection does not always work as expected + * Editing Data Queries with multiple data templates can give errors about Suggested values + * Progress bar does not provide enough visual information during long page loads + * Some themes do not allow for a way to see which user is currently signed in + * When viewing tables, allow users to force all columns to be visible + * Column sizing is being lost between pages refreshes + * When viewing input methods table, no ID is shown to help identify which method is being viewed + * Filters do not always respect using keyboard to initiate searching + * When exporting a data query, an invalid column name error can sometimes be shown + * When checking if a view is allowed, having no session can result in errors + * When removing devices via the CLI, undefined variable errors may be seen + * Real Time Graphs may cause invalid index errors + * On newer versions of MySQL/MariaDB, 'system' keyword can cause issues + * Plugin setup can generate errors when reading options via system function + * Plugin version numbers can be unexpectedly truncated + * When PHP Session is set to autostart, an error can be reported as Cacti attempts to start it + * When removing multiple items, selection process does not always work + * When exporting colors, the indicator is not always removed upon completion + * Unable to pass tree and leaf ID to 'graph_button' hook + * When performing maintenance, various errors may sometimes be seen + * When Guest User setting is active, current user is not always properly set + * When installing Cacti, minor errors in text can be seen + * Numbers are not always formatted properly when there are no decimal places + * When viewing Real Time Graphs, an undefined index error may be recorded + * Minor memory leaks and refresh issues when zooming on graphs + * Real Time Graphs may sometimes fail due to folder permissions + * Navigation can sometimes occur unexpectedly due to background timers + * Trees management screen not reporting correct number of trees + * Tree sequences can sometimes skip numbers during resorting + * Guest user selection should not allow setting the currently logged in user + * Links in Table Headers do not show clearly when in modern theme + * Under some cases tree logic leads to undefined index errors + * Cacti Data Debug can show errors if the Data Source is damaged or has been removed + * When importing a data query, an invalid column name error can sometimes be shown + * When using shift functions on graphs, negative values are not allowed + * Correct issue when file is unreadable reporting no file was specified + * Orphaned Plugins have no option to be removed + * Update MySQL recommendations for Character Set and Colation + * Correct sorting of IP addresses to be numeric not alpha by JamesTilt + * Saving a device should not always repopulate the poller cache + ++++ 2541 more lines (skipped) ++++ between /dev/null ++++ and /work/SRC/openSUSE:Leap:15.2:Update/.cacti.17154.new.1890/cacti.changes New: ---- cacti-1.2.19.tar.gz cacti-config.patch cacti-cron.service cacti-cron.timer cacti-httpd.conf cacti-httpd.conf.default cacti-rpmlintrc cacti.changes cacti.cron cacti.logrotate cacti.spec ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ cacti.spec ++++++ # # spec file for package cacti # # Copyright (c) 2021 SUSE LLC # # All modifications and additions to the file contributed by third parties # remain the property of their copyright owners, unless otherwise agreed # upon. The license for this file, and modifications and additions to the # file, is the same license as for the pristine package itself (unless the # license for the pristine package is not an Open Source License, in which # case the license is the MIT License). An "Open Source License" is a # license that conforms to the Open Source Definition (Version 1.9) # published by the Open Source Initiative. # Please submit bugfixes or comments via https://bugs.opensuse.org/ # %{!?make_build: %define make_build make %{?_smp_mflags}} %if 0%{?suse_version} <= 1210 %define cacti_dir %{_datadir}/cacti %else %define cacti_dir %{apache_datadir}/cacti %endif %if 0%{?suse_version} >= 01230 %bcond_without systemd %else %bcond_with systemd %endif Name: cacti Version: 1.2.19 Release: 0 Summary: Web Front-End to Monitor System Data via RRDtool License: GPL-2.0-or-later Group: System/Monitoring URL: http://www.cacti.net/ Source0: http://www.cacti.net/downloads/%{name}-%{version}.tar.gz Source1: %{name}.cron Source2: %{name}-httpd.conf Source3: %{name}.logrotate Source4: %{name}-httpd.conf.default Source5: %{name}-cron.service Source6: %{name}-cron.timer Source10: cacti-rpmlintrc # PATCH-FIX-UPSTREAM cacti-config.patch Patch0: %{name}-config.patch BuildRequires: apache-rpm-macros Requires: httpd Requires: logrotate Requires: net-snmp Requires: php-ctype Requires: php-gd Requires: php-gmp Requires: php-json Requires: php-ldap Requires: php-mbstring Requires: php-openssl Requires: php-posix Requires: php-snmp >= 7.0 Requires: php-zlib Requires: rrdtool Conflicts: cacti-spine < %{version} Conflicts: cacti-spine > %{version} Provides: cacti-system = %{version}-%{release} Obsoletes: cacti-PA < %{version}-%{release} Provides: cacti-PA = %{version}-%{release} BuildArch: noarch %if 0%{?suse_version} BuildRequires: apache2-devel %else BuildRequires: httpd-devel %endif %if 0%{?suse_version} BuildRequires: fdupes Requires: mod_php_any >= 7.0 Requires: php-sockets >= 7.0 %if %{with systemd} BuildRequires: pkgconfig(systemd) %{?systemd_requires} %else BuildRequires: cron Requires: cron %endif %endif %if 0%{?fedora_version} Requires: php-mysqlnd >= 7.0 %else Requires: php-mysql >= 7.0 %endif %description Cacti is a complete front-end to RRDtool: it stores all necessary information for creating graphs and populates them with data from a MySQL database. The front-end is completely PHP driven. Along with being ableto maintain graphs, data sources, and round robin archives ina database, Cacti also handles data gathering. There exists an SNMP support for those accustomed to creating traffic graphs with MRTG as well. %package doc Summary: Documentation for Cacti Group: System/Monitoring Requires: %{name} = %{version} %description doc Cacti is a complete front-end to RRDtool: it stores all necessary information for creating graphs and populates them with data from a MySQL database. The front-end is completely PHP driven. Along with being ableto maintain graphs, data sources, and round robin archives ina database, Cacti also handles data gathering. There exists an SNMP support for those accustomed to creating traffic graphs with MRTG as well. This package contains the HTML documentation for Cacti. %prep %setup -q %patch0 -p1 #delete some files find . -type f -name "*\.orig" -exec rm {} \; find . -type f -name .gitignore -delete find . -type f -name .gitattributes -delete find . -type f -name .htaccess -delete # fix env interpreter lines sed -i 's|%{_bindir}/env perl|%{_bindir}/perl|g' scripts/*.pl sed -i 's|%{_bindir}/env php|%{_bindir}/php|g' include/vendor/cldr-to-gettext-plural-rules/bin/export-plural-rules %build #nothing to build %install install -d -m 0755 %{buildroot}%{cacti_dir} install -d -m 0755 %{buildroot}%{_localstatedir}/lib/%{name} install -d -m 0755 %{buildroot}%{_localstatedir}/log/%{name} cp *.php %{buildroot}%{cacti_dir} cp -pr cache %{buildroot}%{cacti_dir} cp -pr cli %{buildroot}%{cacti_dir} cp -pr formats %{buildroot}%{cacti_dir} cp -pr images %{buildroot}%{cacti_dir} cp -pr include %{buildroot}%{cacti_dir} cp -pr install %{buildroot}%{cacti_dir} cp -pr lib %{buildroot}%{cacti_dir} cp -pr locales %{buildroot}%{cacti_dir} cp -pr mibs %{buildroot}%{cacti_dir} cp -pr plugins %{buildroot}%{cacti_dir} cp -pr resource %{buildroot}%{cacti_dir} cp -pr rra %{buildroot}%{cacti_dir} cp -pr scripts %{buildroot}%{cacti_dir} install -d -m 0755 scripts %{buildroot}%{cacti_dir}/scripts install -m 0755 scripts/* %{buildroot}%{cacti_dir}/scripts install -d -m 0755 cli %{buildroot}%{cacti_dir}/cli install -m 0755 cli/* %{buildroot}%{cacti_dir}/cli install -m 0644 *.sql %{buildroot}%{cacti_dir} %if %{with systemd} install -Dm644 %{SOURCE6} %{buildroot}%{_unitdir}/%{name}-cron.timer sed -e "s;__CACTIDIR__;%{cacti_dir};g" \ -e "s;__APACHEUSER__;%{apache_user};g" \ %{SOURCE5} > %{buildroot}%{_unitdir}/%{name}-cron.service %else # cron task install -d -m 0755 %{buildroot}%{_sysconfdir}/cron.d sed -e "s;__CACTIDIR__;%{cacti_dir};g" -e "s;__APACHEUSER__;%{apache_user};g" \ %{SOURCE1} > %{buildroot}%{_sysconfdir}/cron.d/%{name} %endif # apache2 config %if 0%{?suse_version} %if 0%{?suse_version} > 1210 install -d -m 0755 %{buildroot}%{apache_sysconfdir}/conf.d sed -e "s;__CACTIDIR__;%{cacti_dir};g" %{SOURCE4} > %{buildroot}%{apache_sysconfdir}/conf.d/%{name}.conf install -d -m 0755 %{buildroot}%{apache_sysconfdir}/vhosts.d/conf.d sed -e "s;__CACTIDIR__;%{cacti_dir};g" -e "s;<IfDefine CACTI>;<IfDefine CACTIVHOST>;g" \ %{SOURCE4} > %{buildroot}%{apache_sysconfdir}/vhosts.d/conf.d/%{name}.conf %endif %if 0%{?suse_version} <= 1210 install -d -m 0755 %{buildroot}%{apache_sysconfdir}/conf.d sed -e "s;__CACTIDIR__;%{cacti_dir};g" %{SOURCE2} > %{buildroot}%{apache_sysconfdir}/conf.d/%{name}.conf %endif %else install -d -m 0755 %{buildroot}%{apache_sysconfdir}/../conf.d sed -e "s;__CACTIDIR__;%{cacti_dir};g" %{SOURCE2} > %{buildroot}%{apache_sysconfdir}/../conf.d/%{name}.conf %endif # logrotate config mkdir -p %{buildroot}%{_sysconfdir}/logrotate.d/ sed -e "s;__APACHEUSER__;%{apache_user};g" -e "s;__APACHEGROUP__;%{apache_group};g" \ %{SOURCE3} > %{buildroot}%{_sysconfdir}/logrotate.d/%{name} # Set the correct permissions for pl and sh files #find %%{buildroot}%%{cacti_dir} -type f -name "*.sh" -o -name "*.pl" -exec chmod ugo+x {} \; # compute files list without config file find %{buildroot}%{cacti_dir} -type d | sed -e 's|'%{buildroot}'|%dir |' >> %{name}.list find %{buildroot}%{cacti_dir} -type f ! -name config.php | sed -e 's|'%{buildroot}'||' >> %{name}.list ln -sf %{_localstatedir}/log/%{name} %{buildroot}%{cacti_dir}/log %if 0%{?suse_version} %fdupes %{buildroot} %endif %if %{with systemd} %post %service_add_post %{name}-cron.timer %pre %service_add_pre %{name}-cron.timer %preun %service_del_preun %{name}-cron.timer %postun %service_del_postun %{name}-cron.timer %endif %files -f %{name}.list %license LICENSE %doc README.md %attr(-,%{apache_user},%{apache_group}) %dir %{_localstatedir}/lib/%{name} %attr(-,%{apache_user},%{apache_group}) %dir %{_localstatedir}/log/%{name} %attr(-,%{apache_user},%{apache_group}) %{cacti_dir}/rra %attr(-,%{apache_user},%{apache_group}) %{cacti_dir}/log %config(noreplace) %{cacti_dir}/include/config.php %if %{with systemd} %{_unitdir}/%{name}-cron.service %{_unitdir}/%{name}-cron.timer %else %config(noreplace) %{_sysconfdir}/cron.d/%{name} %endif %config(noreplace) %{_sysconfdir}/logrotate.d/%{name} %if 0%{?suse_version} %if 0%{?suse_version} <= 1210 %dir %{apache_sysconfdir}/conf.d %config(noreplace) %{apache_sysconfdir}/conf.d/%{name}.conf %endif %if 0%{?suse_version} > 1210 %dir %{apache_sysconfdir}/conf.d %config(noreplace) %{apache_sysconfdir}/conf.d/%{name}.conf %dir %{apache_sysconfdir}/vhosts.d/conf.d %config(noreplace) %{apache_sysconfdir}/vhosts.d/conf.d/%{name}.conf %endif %else %dir %{apache_sysconfdir}/../conf.d %config(noreplace) %{apache_sysconfdir}/../conf.d/%{name}.conf %endif %changelog ++++++ cacti-config.patch ++++++ Index: cacti-1.2.12/include/config.php =================================================================== --- cacti-1.2.12.orig/include/config.php +++ cacti-1.2.12/include/config.php @@ -44,17 +44,17 @@ $database_ssl_ca = ''; * must remain commented out. */ -#$rdatabase_type = 'mysql'; -#$rdatabase_default = 'cacti'; -#$rdatabase_hostname = 'localhost'; -#$rdatabase_username = 'cactiuser'; -#$rdatabase_password = 'cactiuser'; -#$rdatabase_port = '3306'; -#$rdatabase_retries = 5; -#$rdatabase_ssl = false; -#$rdatabase_ssl_key = ''; -#$rdatabase_ssl_cert = ''; -#$rdatabase_ssl_ca = ''; +//#$rdatabase_type = 'mysql'; +//#$rdatabase_default = 'cacti'; +//#$rdatabase_hostname = 'localhost'; +//#$rdatabase_username = 'cactiuser'; +//#$rdatabase_password = 'cactiuser'; +//#$rdatabase_port = '3306'; +//#$rdatabase_retries = 5; +//#$rdatabase_ssl = false; +//#$rdatabase_ssl_key = ''; +//#$rdatabase_ssl_cert = ''; +//#$rdatabase_ssl_ca = ''; /* * The poller_id of this system. set to `1` for the main cacti web server. @@ -69,13 +69,13 @@ $poller_id = 1; * would be set to `/cacti/`. */ -$url_path = '/cacti/'; +//$url_path = '/cacti/'; /* * Default session name - session name must contain alpha characters */ -$cacti_session_name = 'Cacti'; +//$cacti_session_name = 'Cacti'; /* * Default Cookie domain - The cookie domain to be used for Cacti @@ -87,7 +87,7 @@ $cacti_session_name = 'Cacti'; * Save sessions to a database for load balancing */ -$cacti_db_session = false; +//$cacti_db_session = false; /* * Disable log rotation settings for packagers ++++++ cacti-cron.service ++++++ [Unit] Description=Automated poller.php call for cacti [Service] Type=oneshot User=__APACHEUSER__ ExecStart=/bin/bash -ce "/usr/bin/php -f __CACTIDIR__/poller.php 1>/dev/null 2>&1" ++++++ cacti-cron.timer ++++++ [Unit] Description=Automated timer for cacti poller.php [Timer] OnCalendar=*:0/5 AccuracySec=12h Persistent=true [Install] WantedBy=timers.target ++++++ cacti-httpd.conf ++++++ Alias /cacti __CACTIDIR__ <Directory __CACTIDIR__> Options None Order deny,allow Deny from all Allow from localhost </Directory> # For SSL-servers #Alias /cacti __CACTIDIR__ #<Directory __CACTIDIR__> # Options None # SSLRequireSSL # Order deny,allow # Deny from all # AuthType Basic # AuthUserFile /site/cfg/passwd # AuthGroupFile /site/cfg/group # AuthName "cacti" # Require group cacti # Satisfy any #</Directory> ++++++ cacti-httpd.conf.default ++++++ # Example configuration for a cacti repository # # ::As default server:: # Put the string CACTI in /etc/sysconfig/apache2 APACHE_SERVER_FLAGS # to enable the URL http://localhost/cacti # # ::As Virtual Host:: # If you want to use cacti in one Virtual Host, add # Include /etc/apache2/vhosts.d/conf.d/cacti.conf # to the vhost in the vhost.conf file # Put the string CACTIVHOST in /etc/sysconfig/apache2 # APACHE_SERVER_FLAGS to enable the URL http://vhost/cacti # <IfDefine CACTI> <IfModule mod_alias.c> Alias /cacti __CACTIDIR__ </IfModule> <Directory __CACTIDIR__> DirectoryIndex index.php Options +FollowSymLinks AllowOverride none # Access Control # Default to only allow connections from localhost Require all denied Require local # Authentication Settings # Uncomment and apply to add Basic Authentication # AuthType Basic # AuthName "cacti" # AuthBasicProvider file # AuthUserFile /site/cfg/passwd # AuthGroupFile /site/cfg/group # Require group cacti # Satisfy any # SSL Configuration # Uncomment to always require SSL when SSL is enabled <IfDefine SSL> <IfDefine !NOSSL> <IfModule mod_ssl.c> # SSLRequireSSL </IfModule> </IfDefine> </IfDefine> <IfModule mod_php7.c> php_flag magic_quotes_gpc Off php_flag short_open_tag On php_flag register_globals Off php_flag register_argc_argv On php_flag track_vars On # this setting is necessary for some locales php_value mbstring.func_overload 0 php_value include_path . </IfModule> </Directory> <DirectoryMatch ^__CACTIDIR__/(docs|images|include|install)> Require all granted <Files config.php> Require all denied </Files> </DirectoryMatch> <Directory __CACTIDIR__/*/> Require all denied </Directory> </IfDefine> ++++++ cacti-rpmlintrc ++++++ # the following lines are for the cron job that is used to # run administrative tasks in cacti addFilter("suse-missing-rclink cacti-cron"); addFilter("systemd-service-without-service_add_post cacti-cron.service"); addFilter("systemd-service-without-service_add_pre cacti-cron.service"); addFilter("systemd-service-without-service_del_postun cacti-cron.service"); addFilter("systemd-service-without-service_del_preun cacti-cron.service"); # no lib: rpmlint false positive addFilter("explicit-lib-dependency php-zlib"); ++++++ cacti.cron ++++++ */5 * * * * __APACHEUSER__ php __CACTIDIR__/poller.php > /dev/null 2>&1 ++++++ cacti.logrotate ++++++ /var/log/cacti/cacti.log { missingok compress notifempty size 30k su __APACHEUSER__ __APACHEGROUP__ create 0660 __APACHEUSER__ __APACHEGROUP__ }
