[Pkg-nagios-changes] [pkg-nrpe] 03/15: Disable command-args in nrpe.

[Alexander Wirt]

This is an automated email from the git hooks/post-receive script.

formorer pushed a commit to branch master
in repository pkg-nrpe.

commit 023e909bb1d49481bae4f144d27640c236b5935e
Author: Alexander Wirt <formorer at debian.org>
Date:   Tue Jul 15 10:00:17 2014 +0200

    Disable command-args in nrpe.
    
    Closes: #745272
---
 debian/NEWS  | 9 +++++++++
 debian/rules | 4 ++--
 2 files changed, 11 insertions(+), 2 deletions(-)

diff --git a/debian/NEWS b/debian/NEWS
index 9410389..ced6d9c 100644
--- a/debian/NEWS
+++ b/debian/NEWS
@@ -1,3 +1,12 @@
+nagios-nrpe (2.15-1) unstable; urgency=high
+
+  This update disables the command-args support in nrpe. The feature
+  has several security problems and is often used wrong. If you have to
+  use this feature recompile the package without --disable-command-args
+  in debian/rules.
+
+ -- Alexander Wirt <formorer at debian.org>  Tue, 15 Jul 2014 09:52:48 +0200
+
 nagios-nrpe (2.12-4) unstable; urgency=low
 
   The pidfile creation mechanism changed with this update. If you do not 
diff --git a/debian/rules b/debian/rules
index c44cea2..9df22a0 100755
--- a/debian/rules
+++ b/debian/rules
@@ -14,10 +14,10 @@ override_dh_auto_configure:
 		--prefix=/usr \
 		--enable-ssl \
 		--with-ssl-lib=/usr/lib/$(DEB_HOST_MULTIARCH) \
+		--disable-command-args \
 		--sysconfdir=/etc \
 		--localstatedir=/var \
 		--libexecdir=/usr/lib/nagios/plugins \
-		--libdir=/usr/lib/nagios \
-		--enable-command-args
+		--libdir=/usr/lib/nagios
 
 override_dh_auto_install:

-- 
Alioth's /usr/local/bin/git-commit-notice on /srv/git.debian.org/git/pkg-nagios/pkg-nrpe.git