Skip to content

Send signals as Icinga user in safe-reload and logrotate#10597

Merged
julianbrost merged 1 commit intosupport/2.14from
kill-drop-permissions-214
Oct 9, 2025
Merged

Send signals as Icinga user in safe-reload and logrotate#10597
julianbrost merged 1 commit intosupport/2.14from
kill-drop-permissions-214

Conversation

@yhabteab
Copy link
Member

@yhabteab yhabteab commented Oct 9, 2025

In contrast to the regular `kill` binary, `icinga2 internal signal` drops
permissions before sending the signal. This is important as the PID file can be
written by the Icinga user, dropping the permissions prevents that user from
using this to send signals to processes it is not supposed to signal.

SIGUSR1 wasn't among the list of signals supported by `icinga2 internal
signal`, so it is added there.
@yhabteab yhabteab added this to the 2.14.7 milestone Oct 9, 2025
@yhabteab yhabteab added the bug Something isn't working label Oct 9, 2025
@cla-bot cla-bot bot added the cla/signed label Oct 9, 2025
@yhabteab yhabteab requested a review from julianbrost October 9, 2025 12:58
@julianbrost julianbrost enabled auto-merge October 9, 2025 13:12
@julianbrost julianbrost merged commit cd90ada into support/2.14 Oct 9, 2025
43 of 44 checks passed
@julianbrost julianbrost deleted the kill-drop-permissions-214 branch October 9, 2025 15:55
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working cla/signed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants