[Pkg-nagios-devel] Bug#773840: Bug#773840: Bug#773840: nagios-nrpe: NRPE configured without --enable-command-args on build

[Alexander Wirt]

On Tue, 23 Dec 2014, Daniel Case wrote:

> > Package: nagios-nrpe-server
> > Version: 2.15-1
> > Severity: important
> > File: nagios-nrpe
> > Tags: newcomer
> 
> >As I already said, I am fed up with those nrpe users. Take the package and be
> >happy with it and its users, security bugs and stupid code.
> 
> Fine, I will take it over. No need to be like that, it's a very delicate situation but just disabling it at run time isn't helpful at all as it's probably the most used feature.
And it is probably one of the most dangerous features. It is impossible to
get it safe just with nrpe. It just a remote shell.

I can of course forward you several of the complaints, insults and so on I
received over the last years from people that got their machines hacked via
nrpe.

Alex