Skip to content

Send signals as Icinga user in safe-reload and logrotate#10601

Merged
julianbrost merged 1 commit intosupport/2.13from
kill-drop-permissions-213
Oct 9, 2025
Merged

Send signals as Icinga user in safe-reload and logrotate#10601
julianbrost merged 1 commit intosupport/2.13from
kill-drop-permissions-213

Conversation

@yhabteab
Copy link
Member

@yhabteab yhabteab commented Oct 9, 2025

In contrast to the regular `kill` binary, `icinga2 internal signal` drops
permissions before sending the signal. This is important as the PID file can be
written by the Icinga user, dropping the permissions prevents that user from
using this to send signals to processes it is not supposed to signal.

SIGUSR1 wasn't among the list of signals supported by `icinga2 internal
signal`, so it is added there.
@yhabteab yhabteab added this to the 2.13.13 milestone Oct 9, 2025
@yhabteab yhabteab added the bug Something isn't working label Oct 9, 2025
@cla-bot cla-bot bot added the cla/signed label Oct 9, 2025
@yhabteab yhabteab requested a review from julianbrost October 9, 2025 15:44
@julianbrost julianbrost enabled auto-merge October 9, 2025 16:15
@julianbrost julianbrost merged commit 44b1e1e into support/2.13 Oct 9, 2025
25 checks passed
@julianbrost julianbrost deleted the kill-drop-permissions-213 branch October 9, 2025 17:37
@julianbrost julianbrost added this to the 2.13.13 milestone Jan 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

bug Something isn't working cla/signed

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants