monitoring-plugins/plugins/check_ntp_time.c, branch 3.0.0-rc3Monitoring Plugins
https://www.monitoring-plugins.org/repositories/monitoring-plugins/atom?h=3.0.0-rc32026-02-16T10:22:39ZFix typo in enum MP_PARSING_SUCCES(S) (#2233)2026-02-16T10:22:39ZDirk Muellerdmueller@suse.com2026-02-16T10:22:39Zurn:sha1:07a249a5d74a980ca78cead569de5351963cc561Make IPv6 unconditional (#2219)2026-02-06T11:59:58ZLorenz Kästle12514511+RincewindsHat@users.noreply.github.com2026-02-06T11:59:58Zurn:sha1:0f0865c910096c95594ac09929708e84934e46df
This commits removes the detection of IPv6 availability.
The IPv6 code in the plugins is used unconditionally now.OpenBSD: pledge(2) some network-facing checks (#2225)2026-02-06T11:58:38ZAlvarpost@0x21.biz2026-02-06T11:58:38Zurn:sha1:cef40299a93233f043f5b0821a9ad2c69dd612f7
OpenBSD's pledge(2) system call allows the current process to
self-restrict itself, being reduced to promised pledges. For example,
unless a process says it wants to write to files, it is not allowed to
do so any longer.
This change starts by calling pledge(2) in some network-facing checks,
removing the more dangerous privileges, such as executing other files.
My initial motivation came from check_icmp, being installed as a setuid
binary and (temporarily) running with root privileges. There, the
pledge(2) calls result in check_icmp to only being allowed to interact
with the network and to setuid(2) to the calling user later on.
Afterwards, I went through my most commonly used monitoring plugins
directly interacting with the network. Thus, I continued with
pledge(2)-ing check_curl - having a huge codebase and all -,
check_ntp_time, check_smtp, check_ssh, and check_tcp.
For most of those, the changes were quite similar: start with
network-friendly promises, parse the configuration, give up file access,
and proceed with the actual check.Fix check_ntp_time without a socket (#2196)2025-12-04T12:24:14ZLorenz Kästle12514511+RincewindsHat@users.noreply.github.com2025-12-04T12:24:14Zurn:sha1:3ae751ed67bb59c5073e0a160f4125ba2a5ff1e4
In the previous commit I unintentionally introduced an error
through symbol shadowing.
This should fix check_ntp_time when the target address
is a network address.check_ntp_time/check_ntp_peer: unix socket handling (#2187)2025-11-28T09:52:39ZLorenz Kästle12514511+RincewindsHat@users.noreply.github.com2025-11-28T09:52:39Zurn:sha1:2f96b82c9b67ca1aad6cd584a9c458d060bdd4bb
* check_ntp_time/check_ntp_peer: unix socket handling
* No tests for check_ntp since it is deprecatedcheck_ntp_time: add cli option for output format2025-11-05T11:19:20ZLorenz Kästle12514511+RincewindsHat@users.noreply.github.com2025-11-05T11:19:20Zurn:sha1:71e0d5e0732225e95affbacd1a08f2a8513d2802check_ntp_time: reduce number of significant bits a bit2025-11-05T09:42:43ZLorenz Kästle12514511+RincewindsHat@users.noreply.github.com2025-11-05T09:42:43Zurn:sha1:7b226257b7df01dd80af07c39e0f49fdcf84cee4check_ntp_time: fix time-offset argument and description2025-11-05T09:42:12ZLorenz Kästle12514511+RincewindsHat@users.noreply.github.com2025-11-05T09:42:12Zurn:sha1:cadcfaecbec56d2ecf44bb33bb394ca815240127check_ntp_time: actually accept offset if known2025-11-05T09:41:34ZLorenz Kästle12514511+RincewindsHat@users.noreply.github.com2025-11-05T09:41:34Zurn:sha1:16daa06e439da1541cbcb4e0622131838b21ba0fcheck_ntp_time: implement modern output2025-11-04T11:08:59ZLorenz Kästle12514511+RincewindsHat@users.noreply.github.com2025-11-04T11:08:59Zurn:sha1:b35853ee4e10c4485a9521d77c95aecae6573e64