3c1c0c1731- Apply "vsftpd-support-dsa-only-setups.patch" to disable the problematic default setting for rsa_cert_file. Upstream initializes that value to "/usr/share/ssl/certs/vsftpd.pem" and vsftpd won't start up if that file does not exist (or if does not contain an RSA certificate). Therefore, users who copy a DSA certificate into that location or properly configure a DSA certificate via dsa_cert_file without explicitly disabling the RSA certificate won't be able to start vsftpd. [bsc#975538]Peter Simons2018-06-21 11:14:05 +00:00
a8573409c6Don't start/stop parameterized systemd units in pre/post actions. These units cannot be used in such a way and the attempt leads to a confusing "failed to try-restart" error message. [bsc#1089088]Peter Simons2018-05-16 15:29:38 +00:00
137bff6e44Enable wait4(), sysinfo(), and shutdown() syscalls in seccomp sandbox. These are required for the daemon to work properly on SLE-15. [bsc#1089088]Peter Simons2018-05-14 11:49:10 +00:00
f6c72fe663- Don't rely on the vsf_findlibs.sh script to figure out the list of libraries the build needs to link. The script is wildly unreliable and it's hard to predict what results it will produce. Also, the results it *does* produce are invisble in the build log. We stumbled across this issue when vsftpd suddendly had build failures on i586 platforms because the script decided to try and link "-lnsl" even though the library was neither installed nor required.Peter Simons2017-09-11 13:02:10 +00:00
6364c36bd6Add "vsftpd-3.0.3-address_space_limit.patch" to create the new configuration option "address_space_limit", which determines the memory limit vsftpd configures for its own process (given in bytes). The previously hard-coded limit (100 MB) may not be sufficient for vsftpd servers running with certain PAM modules enabled, and in such cases administrators may wish to raise the limit to match their system's requirements. [bsc#1042137]Peter Simons2017-09-08 07:29:34 +00:00
ce43389ac4Add "vsftpd-append-seek-pipe.patch" to allow the FTP server to append to a file system pipe. [bsc#1048427]Peter Simons2017-09-07 14:51:06 +00:00
eb840b0f5cAdd "vsftpd-mdtm-in-utc.patch" to fix interoperability issue with various ftp clients that arose when vsftpd is configured with option "use_localtime=YES". Basically, it's fine to use local time stamps in directory listings, but responding to MDTM commands with any time zone other than UTC directly violates RFC3659 and leads FTP clients to misinterpret the file's time stamp. [bsc#1024961]Peter Simons2017-09-07 13:55:51 +00:00
cf6d32b00eAdd "vsftpd-die-with-session.patch" to fix a bug in vsftpd that would cause SSL protocol errors, aborting the connection, whenever system errors occurred that were supposed to be non-fatal. [bsc#1044292]Peter Simons2017-09-07 13:15:52 +00:00
6bfb03fe57- Conditionally install xinetd service only on older releases * On current distributions we support the same functionality via systemd socket activation
Tomáš Chvátal
2017-06-14 11:44:16 +00:00
33ca05c450Accepting request 503275 from home:dmolkentin:branches:networkPeter Simons2017-06-12 22:37:25 +00:00
46b63b2299Explicitly depend on OpenSSL version 1.0.x since vsftpd doesn't compile against the API provided by newer versions.Peter Simons2017-05-31 15:30:59 +00:00
ffdb3d153bAdd vsftpd-3.0.2-fix-chown-uploads.patch to fix a bug in vsftpd where files uploaded by an anonymous user could not be chown()ed to the desired UID as specified in the daemon's configuration file. [bnc#996370]Peter Simons2016-09-19 11:43:40 +00:00