<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=ISO-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>enable –enable-command-args again, please</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/rtf format -->
<P DIR=LTR><SPAN LANG="de"><FONT FACE="Calibri">Dear Maintainer,</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="de"></SPAN></P>
<P DIR=LTR><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">i know, that you compiled</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">without –enable-command-args and you</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"> wrote in the NEWS.Debian file, that you disabled it because there are security problems and that this feature is often us</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">ed wrong. </FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">Some people need this feature to manage monitoring parameters central.</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">Your nrpe.cfg disables this feature by default (</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">don’t</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">_</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">blam</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">e</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">_nrpe=0) and the features comment shows everyone, that enable it could be a security Problem.</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="de"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">For my opinion, disable this feature by default should be</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">enough</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">.</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"> If someone need this feature, he must compile his own nrpe server version.</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">Maybe he need to do it on hundreds of Machines and he has to do it again, if the</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">D</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">ebian Packet is updated.</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"> I don’t think that Compile nrpe without this feature is a real security advantage because if someone need it, he will compile with this support</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"> except of only enable this feature.</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"> </SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">I Agree with you, that this option could be a security risk, but it is possible to reduce the risk by</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">setting</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"></FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">allowed_hosts</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">to restric who is able to communicate with nrpe.</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"> </SPAN></P>
<P DIR=LTR><SPAN LANG="en-us"><FONT FACE="Calibri">It would be nice if you would compile with</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">–</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">enable-</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">command-args again</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri">. It would give more flexibility how to use nrpe</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"><FONT FACE="Calibri"> and all people who use command args</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"> <FONT FACE="Calibri">wouldn’t need to manage their own version of this packet.</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="en-us"></SPAN></P>
<P DIR=LTR><SPAN LANG="de"></SPAN><SPAN LANG="en-us"></SPAN></P>
<BR>
<P DIR=LTR><SPAN LANG="de"></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="de-de"></SPAN><SPAN LANG="de-de"><FONT SIZE=2 FACE="Arial">Best regards<BR>
</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="de-de"></SPAN></P>
<P DIR=LTR><SPAN LANG="de"></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="de-de"></SPAN><SPAN LANG="de-de"><FONT SIZE=2 FACE="Arial">Jörg</FONT></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="de"></SPAN><SPAN LANG="de-de"></SPAN><SPAN LANG="de-de"><FONT FACE="Times New Roman">, Rauscher</FONT></SPAN></P>
<P DIR=LTR><SPAN LANG="de"></SPAN><SPAN LANG="en-us"></SPAN></P>
</BODY>
</HTML>