SHA256
1
0
forked from pool/vsftpd
Commit Graph

99 Commits

Author SHA256 Message Date
Peter Simons
13c6e7e53c Accepting request 1113641 from home:pmonrealgonzalez:branches:network
- Enable crypto-policies support: [bsc#1211301]
  * Add vsftpd-use-system-wide-crypto-policy.patch

OBS-URL: https://build.opensuse.org/request/show/1113641
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=179
2023-09-26 12:26:47 +00:00
Peter Simons
fbe9396fa6 Accepting request 1105956 from home:kukuk:no-utmp
- Use pam macros to install pam config in /usr/lib/pam.d
- Adjust vsftpd.pam to include postlogin config (replace wtmp with
  wtmpdb for Y2038 [jsc#3144])

OBS-URL: https://build.opensuse.org/request/show/1105956
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=177
2023-09-04 14:01:26 +00:00
Peter Simons
7d36368178 bsc#1200075
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=175
2023-06-19 06:30:36 +00:00
Dominique Leuenberger
dbac437174 Accepting request 1056286 from home:david.anes:branches:network
- Use valid separator for logrotate config file. [bsc#1192179]

OBS-URL: https://build.opensuse.org/request/show/1056286
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=173
2023-03-20 14:04:41 +00:00
d92284cf48 Accepting request 1003834 from home:schubi2:logrotate
- Migration to /usr/etc: Saving user changed configuration files
  in /etc and restoring them while an RPM update.

OBS-URL: https://build.opensuse.org/request/show/1003834
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=171
2022-12-03 07:53:52 +00:00
Peter Simons
9bab98923d address reviewer comments from https://build.opensuse.org/request/show/1004026
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=169
2022-10-06 10:52:06 +00:00
Peter Simons
d2e95e384a bsc#1196918
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=168
2022-09-16 06:25:15 +00:00
Peter Simons
13acedff58 apply disable-tls13-to-support-older-openssl-versions.patch conditionally on SLE-15 only
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=165
2022-09-13 08:53:30 +00:00
Peter Simons
26e013ecd4 Add support for SLE-15.
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=164
2022-08-25 08:25:04 +00:00
Lars Vogdt
1ffeccc9d1 Accepting request 985848 from home:schubi2
- Moved logrotate files from user specific directory /etc/logrotate.d
  to vendor specific directory /usr/etc/logrotate.d.

OBS-URL: https://build.opensuse.org/request/show/985848
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=161
2022-06-29 17:58:03 +00:00
Peter Simons
7b0942936e Accepting request 960290 from home:psimons:branches:network
Use rpm conditional to build against the proper OpenSSL version on all distributions. [jsc#PM-3322]

OBS-URL: https://build.opensuse.org/request/show/960290
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=159
2022-03-08 20:45:10 +00:00
Peter Simons
fa78574173 Import missing patches from SLE-12-SP4.
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=156
2022-02-02 10:24:40 +00:00
Peter Simons
0982f3f57f Revert undocumented config file format changes.
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=154
2022-02-01 19:42:35 +00:00
Peter Simons
7d2364c704 Accepting request 950535 from home:psimons:branches:network
Import patches from SLE-15-SP2.

OBS-URL: https://build.opensuse.org/request/show/950535
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=153
2022-02-01 19:19:28 +00:00
2ddbfaa5d9 Accepting request 917969 from home:favogt:branches:network
Passes openQA's testsuite.

- Update to version 3.0.5:
  * Fix ALPN callback to correctly select the 'ftp' string if present.
    Works with FileZilla-3.55.0.
  * Fix a couple of seccomp policy issues with Fedora 34.

OBS-URL: https://build.opensuse.org/request/show/917969
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=151
2021-09-10 14:46:10 +00:00
Peter Simons
0ca37ce5e5 refresh patches for the new version
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=150
2021-06-29 11:17:01 +00:00
Peter Simons
a55fbc4786 update to 3.0.4
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=149
2021-06-29 09:15:03 +00:00
475ab6e41e Accepting request 856827 from home:namtrac:branches:network
Copied from SLE counterpart.

- Add seccomp-fixes.patch to allow getdents64 syscall in seccomp
  sandbox, fixes bsc#1179553
  Also in the same patch, fix the architecture offset from 4 to 5,
  this change was documented in https://lore.kernel.org/patchwork/patch/554803/

OBS-URL: https://build.opensuse.org/request/show/856827
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=147
2021-01-16 15:15:09 +00:00
Peter Simons
3fa65078f1 implement SLE-4182
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=145
2020-11-13 10:29:04 +00:00
Peter Simons
3eb7a9bc6b Accepting request 827815 from home:dimstar:Factory
- Use %{_prefix}/lib instead of misused %{_libexecdir}.

OBS-URL: https://build.opensuse.org/request/show/827815
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=143
2020-08-19 15:56:57 +00:00
Peter Simons
6bfa53be29 fix segmentation fault
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=139
2019-06-18 15:41:06 +00:00
Peter Simons
2a48a64ac1 Accepting request 709440 from home:dimstar:Factory
Allow OBS to pick better candidates to shorten rebuild queues

OBS-URL: https://build.opensuse.org/request/show/709440
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=138
2019-06-12 15:10:34 +00:00
Ismail Dönmez
13d75c7cdc Accepting request 644107 from home:cboltz:branches:network
- firewall-macros should be BuildRequires, not Requires(post)
  (the macro gets expanded during package build)

Note: this bug / wrong dependency was probably introduced by
    - Add firewalld service file (bsc#1083705)
which I can't access :-(

If similar changes were applied to other packages, please also fix them ;-)

OBS-URL: https://build.opensuse.org/request/show/644107
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=136
2018-10-24 08:00:33 +00:00
Peter Simons
3c1c0c1731 - Apply "vsftpd-support-dsa-only-setups.patch" to disable the
problematic default setting for rsa_cert_file. Upstream
  initializes that value to "/usr/share/ssl/certs/vsftpd.pem" and
  vsftpd won't start up if that file does not exist (or if does not
  contain an RSA certificate). Therefore, users who copy a DSA
  certificate into that location or properly configure a DSA
  certificate via dsa_cert_file without explicitly disabling the
  RSA certificate won't be able to start vsftpd. [bsc#975538]

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=131
2018-06-21 11:14:05 +00:00
Peter Simons
a8573409c6 Don't start/stop parameterized systemd units in pre/post actions. These units
cannot be used in such a way and the attempt leads to a confusing "failed to
try-restart" error message. [bsc#1089088]

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=128
2018-05-16 15:29:38 +00:00
Peter Simons
137bff6e44 Enable wait4(), sysinfo(), and shutdown() syscalls in seccomp sandbox. These are required for the daemon to work properly on SLE-15. [bsc#1089088]
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=125
2018-05-14 11:49:10 +00:00
Tomáš Chvátal
4be5277927 Accepting request 593212 from home:vitezslav_cizek:branches:network
- Add firewalld service file (bsc#1083705)

OBS-URL: https://build.opensuse.org/request/show/593212
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=123
2018-04-03 14:56:04 +00:00
Tomáš Chvátal
d2c5c6ef17 - Make sure to also require group nobody and user ftp bsc#1070653
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=121
2017-12-13 09:39:55 +00:00
Peter Simons
f6c72fe663 - Don't rely on the vsf_findlibs.sh script to figure out the list
of libraries the build needs to link. The script is wildly
  unreliable and it's hard to predict what results it will produce.
  Also, the results it *does* produce are invisble in the build
  log. We stumbled across this issue when vsftpd suddendly had
  build failures on i586 platforms because the script decided to
  try and link "-lnsl" even though the library was neither
  installed nor required.  

- Drop the explicit specification of the LDFLAGS and LINK variables
  from the call to make. The value of LDFLAGS we passed is the
  default anyway and giving LINK has no effect since it's not used
  anywhere in the Makefile.

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=119
2017-09-11 13:02:10 +00:00
Peter Simons
6364c36bd6 Add "vsftpd-3.0.3-address_space_limit.patch" to create the new configuration option "address_space_limit", which determines the memory limit vsftpd configures for its own process (given in bytes). The previously hard-coded limit (100 MB) may not be sufficient for vsftpd servers running with certain PAM modules enabled, and in such cases administrators may wish to raise the limit to match their system's requirements. [bsc#1042137]
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=118
2017-09-08 07:29:34 +00:00
Peter Simons
ce43389ac4 Add "vsftpd-append-seek-pipe.patch" to allow the FTP server to append to a file system pipe. [bsc#1048427]
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=117
2017-09-07 14:51:06 +00:00
Peter Simons
eb840b0f5c Add "vsftpd-mdtm-in-utc.patch" to fix interoperability issue with various ftp clients that arose when vsftpd is configured with option "use_localtime=YES". Basically, it's fine to use local time stamps in directory listings, but responding to MDTM commands with any time zone other than UTC directly violates RFC3659 and leads FTP clients to misinterpret the file's time stamp. [bsc#1024961]
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=116
2017-09-07 13:55:51 +00:00
Peter Simons
cf6d32b00e Add "vsftpd-die-with-session.patch" to fix a bug in vsftpd that would cause SSL protocol errors, aborting the connection, whenever system errors occurred that were supposed to be non-fatal. [bsc#1044292]
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=115
2017-09-07 13:15:52 +00:00
Tomáš Chvátal
6bfb03fe57 - Conditionally install xinetd service only on older releases
* On current distributions we support the same functionality
    via systemd socket activation

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=113
2017-06-14 11:44:16 +00:00
Peter Simons
33ca05c450 Accepting request 503275 from home:dmolkentin:branches:network
- Fix build against OpenSSL 1.1. Remove lock on 1.0.x libs
  adds vsftpd-3.0.3-build-with-openssl-1.1.patch
  (bsc#1042673)

OBS-URL: https://build.opensuse.org/request/show/503275
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=112
2017-06-12 22:37:25 +00:00
Peter Simons
46b63b2299 Explicitly depend on OpenSSL version 1.0.x since vsftpd doesn't compile against
the API provided by newer versions.

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=110
2017-05-31 15:30:59 +00:00
Thorsten Kukuk
ac2e1d899b Accepting request 492473 from home:kukuk:branches:network
- Adjust to new system user/group RPMs

OBS-URL: https://build.opensuse.org/request/show/492473
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=108
2017-05-02 12:29:24 +00:00
Peter Simons
ffdb3d153b Add vsftpd-3.0.2-fix-chown-uploads.patch to fix a bug in vsftpd where files
uploaded by an anonymous user could not be chown()ed to the desired UID as
specified in the daemon's configuration file. [bnc#996370]

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=106
2016-09-19 11:43:40 +00:00
Tomáš Chvátal
695d541dab - Do not bother with omc xml configs, useless nowdays
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=102
2016-08-05 11:28:08 +00:00
Tomáš Chvátal
cb9d86623b OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=100 2016-03-28 19:50:09 +00:00
Tomáš Chvátal
88812d6821 - Require shadow and do not output the error out of useradd
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=99
2016-03-23 10:08:13 +00:00
Tomáš Chvátal
74d07aeab6 OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=97 2016-03-22 14:29:23 +00:00
Tomáš Chvátal
04364bf0b8 - Fix bnc#970982 hanging on pam_exec in pam.d
* Add patch vsftpd-3.0.2-wnohang.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=96
2016-03-21 12:54:56 +00:00
Tomáš Chvátal
5578944fcf - Fix memory leaks in ls.c bnc#968138
* Add patch vsftpd-ls-memleak.patch
  * Update patch vsftpd-path-normalize.patch
- Fix wildcard ? matching bnc#969411
  * Update patch vsftpd-2.3.4-sqb.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=94
2016-03-10 18:20:17 +00:00
Tomáš Chvátal
44ffe22ac1 - Clean-up the init.d support to be bit more readable and add missing dep
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=92
2015-09-21 11:35:52 +00:00
Tomáš Chvátal
71ffe127d6 Accepting request 332591 from home:worldcitizen:branches:network
Brought back additional systemv support so it also builds for SLES 10 and 11

OBS-URL: https://build.opensuse.org/request/show/332591
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=91
2015-09-21 11:27:21 +00:00
Tomáš Chvátal
7cbe902ddd - Version bump to 3.0.3:
* Increase VSFTP_AS_LIMIT to 200MB; various reports.
  * Make the PWD response more RFC compliant; report from Barry Kelly
    <barry@modeltwozero.com>.
  * Remove the trailing period from EPSV response to work around BT Internet
    issues; report from Tim Bishop <tdb@mirrorservice.org>.
  * Fix syslog_enable issues vs. seccomp filtering. Report from Michal Vyskocil
    <mvyskocil@suse.cz>. At least, syslogging seems to work on my Fedora now.
  * Allow gettimeofday() in the seccomp sandbox. I can't repro failures, but I
    probably have a different distro / libc / etc. and there are multiple reports.
  * Some kernels support PR_SET_NO_NEW_PRIVS but not PR_SET_SECCOMP, so handle
    this case gracefully. Report from Vasily Averin <vvs@odin.com>.
  * List the TLS1.2 cipher AES128-GCM-SHA256 as first preference by default.
  * Make some compile-time SSL defaults (such as correct client shutdown
    handling) stricter.
  * Disable Nagle algorithm during SSL data connection shutdown, to avoid 200ms
    delays. From Tim Kosse <tim.kosse@filezilla-project.org>.
  * Kill the FTP session if we see HTTP protocol commands, to avoid
    cross-protocol attacks. A report from Jann Horn <jann@thejh.net>.
  * Kill the FTP session if we see session re-use failure. A report from
    Tim Kosse <tim.kosse@filezilla-project.org>.
  * Enable ECDHE, Tim Kosse <tim.kosse@filezilla-project.org>.
  * Default cipher list is now just ECDHE-RSA-AES256-GCM-SHA384.
  * Minor SSL logging improvements.
  * Un-default tunable_strict_ssl_write_shutdown again. We still have
    tunable_strict_ssl_read_eof defaulted now, which is the important one to prove
    upload integrity.
- Drop patch vsftpd-allow-dev-log-socket.patch should be included
  upstream, se above bullet with mvyskocil's email

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=89
2015-09-08 11:05:12 +00:00
Tomáš Chvátal
fa040448aa - Add back patch attempting to fix bnc#900326 bnc#915522 and
bnc#922538:
  * vsftpd-path-normalize.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=76
2015-03-23 20:22:32 +00:00
Tomáš Chvátal
8c317ca736 - Reset filter patch to match fedora, my work will be restarted
in one-off patch to make the changes stand out. Add rest of
  RH filtering patches:
  * vsftpd-2.2.0-wildchar.patch
  * vsftpd-2.3.4-sqb.patch
  * vsftpd-2.1.0-filter.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=75
2015-03-23 20:10:51 +00:00
Tomáš Chvátal
e1041567b4 - Add service calls for other unit files too
- WIP udate filter patch to work as expected:
  * vsftpd-2.1.0-filter.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=71
2015-02-20 12:14:28 +00:00