> Are there legitimate reasons for having printenv enabled?  I am trying
> to assess the consequences of removing it.

printenv is mainly used for testing purposes, but it shouldn't be installed in 
production servers, as it might give too much information about the system to 
potential attackers.  I don't think there exists any wisely-implemented 
application which needs such a tool in order to perform its regular tasks.

_______________________________________________
Nessus mailing list
[EMAIL PROTECTED]
http://mail.nessus.org/mailman/listinfo/nessus

Reply via email to