rpm/vsftpd
SHA256
1
0
Fork 0
forked from pool/vsftpd
Code Pull Requests Activity

Accepting request 157548 from network

Browse Source 
- add isolate_network and seccomp_sandbox options to template to make them
  easier to find (bnc#786024) (forwarded request 157236 from lnussel)

OBS-URL: https://build.opensuse.org/request/show/157548
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=38
This commit is contained in:
Stephan Kulow 2013-03-07 06:35:30 +00:00 committed by Git OBS Bridge
commit 40abef61e5
2 changed files with 16 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
vsftpd-2.3.5-conf.patch
View File

@ -1,7 +1,7 @@
Index: vsftpd.conf
===================================================================
--- vsftpd.conf.orig 2011-12-17 19:24:40.000000000 +0100
+++ vsftpd.conf 2012-04-11 10:19:06.192238657 +0200
--- vsftpd.conf.orig
+++ vsftpd.conf
@@ -4,23 +4,89 @@
# loosens things up a bit, to make the ftp daemon more usable.
# Please see vsftpd.conf.5 for all compiled in defaults.
@ -98,7 +98,7 @@ Index: vsftpd.conf
# Uncomment this to allow the anonymous FTP user to upload files. This only
# has an effect if the above global write enable is activated. Also, you will
# obviously need to create a directory writable by the FTP user.
@@ -30,15 +96,9 @@
@@ -30,15 +96,9 @@ anonymous_enable=YES
# new directories.
#anon_mkdir_write_enable=YES
#
@ -117,7 +117,7 @@ Index: vsftpd.conf
#
# If you want, you can arrange for uploaded anonymous files to be owned by
# a different user. Note! Using "root" for uploaded files is not
@@ -46,24 +106,51 @@
@@ -46,24 +106,51 @@ connect_from_port_20=YES
#chown_uploads=YES
#chown_username=whoever
#
@ -174,7 +174,7 @@ Index: vsftpd.conf
# Enable this and the server will recognise asynchronous ABOR requests. Not
# recommended for security (the code is non-trivial). Not enabling it,
# however, may confuse older FTP clients.
@@ -77,41 +164,29 @@
@@ -77,41 +164,34 @@ connect_from_port_20=YES
# predicted this attack and has always been safe, reporting the size of the
# raw file.
# ASCII mangling is a horrible feature of the protocol.
@ -231,3 +231,8 @@ Index: vsftpd.conf
+# Limit passive ports to this range to assis firewalling
+pasv_min_port=30000
+pasv_max_port=30100
+
+# security features that are incompatible with some other settings. Try to
+# uncomment if vsftpd dies with weird errors.
+#isolate_network=NO
+#seccomp_sandbox=NO

6
vsftpd.changes
View File

@ -1,3 +1,9 @@
-------------------------------------------------------------------
Thu Feb 28 16:02:17 UTC 2013 - lnussel@suse.de
- add isolate_network and seccomp_sandbox options to template to make them
easier to find (bnc#786024)
-------------------------------------------------------------------
Thu Feb 28 13:30:07 UTC 2013 - mvyskocil@suse.com