SHA256
1
0
forked from pool/vsftpd
Commit Graph

174 Commits

Author SHA256 Message Date
Dominique Leuenberger
21ce65e1ee Accepting request 950708 from network
Import patches from SLE-12-SP4, SLE-15-SP2, and revert undocumented config file format changes.

OBS-URL: https://build.opensuse.org/request/show/950708
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=78
2022-02-03 22:15:47 +00:00
Peter Simons
65b6ad2a94 Update changelog to mention all patches.
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=158
2022-02-02 10:41:37 +00:00
Peter Simons
2dd46a39b9 Update changelog to mention all relevant bugs.
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=157
2022-02-02 10:38:26 +00:00
Peter Simons
fa78574173 Import missing patches from SLE-12-SP4.
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=156
2022-02-02 10:24:40 +00:00
Peter Simons
dc5119fcfb fix spelling of patch name
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=155
2022-02-01 19:58:20 +00:00
Peter Simons
0982f3f57f Revert undocumented config file format changes.
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=154
2022-02-01 19:42:35 +00:00
Peter Simons
7d2364c704 Accepting request 950535 from home:psimons:branches:network
Import patches from SLE-15-SP2.

OBS-URL: https://build.opensuse.org/request/show/950535
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=153
2022-02-01 19:19:28 +00:00
Dominique Leuenberger
5963417d82 Accepting request 948334 from network
OBS-URL: https://build.opensuse.org/request/show/948334
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=77
2022-01-26 20:26:31 +00:00
Peter Simons
64dddf151a Accepting request 945222 from home:jsegitz:branches:systemdhardening:network
Automatic systemd hardening effort by the security team. This has not been tested. For details please see https://en.opensuse.org/openSUSE:Security_Features#Systemd_hardening_effort

OBS-URL: https://build.opensuse.org/request/show/945222
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=152
2022-01-24 08:42:02 +00:00
Dominique Leuenberger
1c0babff0a Accepting request 917998 from network
OBS-URL: https://build.opensuse.org/request/show/917998
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=76
2021-09-16 21:14:29 +00:00
2ddbfaa5d9 Accepting request 917969 from home:favogt:branches:network
Passes openQA's testsuite.

- Update to version 3.0.5:
  * Fix ALPN callback to correctly select the 'ftp' string if present.
    Works with FileZilla-3.55.0.
  * Fix a couple of seccomp policy issues with Fedora 34.

OBS-URL: https://build.opensuse.org/request/show/917969
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=151
2021-09-10 14:46:10 +00:00
Dominique Leuenberger
7690630f39 Accepting request 904379 from network
Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/904379
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=75
2021-07-09 21:56:38 +00:00
Peter Simons
0ca37ce5e5 refresh patches for the new version
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=150
2021-06-29 11:17:01 +00:00
Peter Simons
a55fbc4786 update to 3.0.4
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=149
2021-06-29 09:15:03 +00:00
Dominique Leuenberger
e6080a4ad1 Accepting request 863668 from network
OBS-URL: https://build.opensuse.org/request/show/863668
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=74
2021-01-19 15:00:24 +00:00
475ab6e41e Accepting request 856827 from home:namtrac:branches:network
Copied from SLE counterpart.

- Add seccomp-fixes.patch to allow getdents64 syscall in seccomp
  sandbox, fixes bsc#1179553
  Also in the same patch, fix the architecture offset from 4 to 5,
  this change was documented in https://lore.kernel.org/patchwork/patch/554803/

OBS-URL: https://build.opensuse.org/request/show/856827
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=147
2021-01-16 15:15:09 +00:00
Dominique Leuenberger
4e812ca096 Accepting request 848321 from network
implement SLE-4182

OBS-URL: https://build.opensuse.org/request/show/848321
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=73
2020-11-15 14:22:21 +00:00
Peter Simons
3fa65078f1 implement SLE-4182
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=145
2020-11-13 10:29:04 +00:00
Dominique Leuenberger
e34bb0cd24 Accepting request 827923 from network
OBS-URL: https://build.opensuse.org/request/show/827923
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=72
2020-08-21 17:01:23 +00:00
Peter Simons
3eb7a9bc6b Accepting request 827815 from home:dimstar:Factory
- Use %{_prefix}/lib instead of misused %{_libexecdir}.

OBS-URL: https://build.opensuse.org/request/show/827815
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=143
2020-08-19 15:56:57 +00:00
Dominique Leuenberger
a3a9f8cf95 Accepting request 754435 from network
OBS-URL: https://build.opensuse.org/request/show/754435
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=71
2019-12-11 11:01:44 +00:00
Tomáš Chvátal
5cf3740e81 Accepting request 754432 from home:jmoellers:branches:network
OBS-URL: https://build.opensuse.org/request/show/754432
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=141
2019-12-05 14:20:01 +00:00
Dominique Leuenberger
c3f22d2f18 Accepting request 710591 from network
- Apply "vsftpd-avoid-bogus-ssl-write.patch" to fix a segmentation
  fault that occurred while trying to write to an invalid TLS
  context. [bsc#1125951]

- BuildRequire pkgconfig(systemd) instead of systemd: allow OBS to
  shortcut the build queues by allowing usage of systemd-mini

OBS-URL: https://build.opensuse.org/request/show/710591
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=70
2019-06-26 14:01:55 +00:00
Peter Simons
6bfa53be29 fix segmentation fault
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=139
2019-06-18 15:41:06 +00:00
Peter Simons
2a48a64ac1 Accepting request 709440 from home:dimstar:Factory
Allow OBS to pick better candidates to shorten rebuild queues

OBS-URL: https://build.opensuse.org/request/show/709440
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=138
2019-06-12 15:10:34 +00:00
Dominique Leuenberger
73336e2cfd Accepting request 644184 from network
OBS-URL: https://build.opensuse.org/request/show/644184
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=69
2018-11-06 13:03:51 +00:00
Ismail Dönmez
13d75c7cdc Accepting request 644107 from home:cboltz:branches:network
- firewall-macros should be BuildRequires, not Requires(post)
  (the macro gets expanded during package build)

Note: this bug / wrong dependency was probably introduced by
    - Add firewalld service file (bsc#1083705)
which I can't access :-(

If similar changes were applied to other packages, please also fix them ;-)

OBS-URL: https://build.opensuse.org/request/show/644107
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=136
2018-10-24 08:00:33 +00:00
Dominique Leuenberger
314e029531 Accepting request 619612 from network
Extend "vsftpd-3.0.3-address_space_limit.patch" to mention the new 'address_space_limit' option in the installed vsftpd.conf(5) man page. [bsc#1075060]

OBS-URL: https://build.opensuse.org/request/show/619612
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=68
2018-07-04 21:52:43 +00:00
Peter Simons
7c1820fc2a document address_space_limit
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=134
2018-06-28 16:02:18 +00:00
Dominique Leuenberger
5d9eefaf8c Accepting request 618293 from network
- Apply "vsftpd-support-dsa-only-setups.patch" to disable the
  problematic default setting for rsa_cert_file. Upstream
  initializes that value to "/usr/share/ssl/certs/vsftpd.pem" and
  vsftpd won't start up if that file does not exist (or if it does
  not contain an RSA certificate). Therefore, users who copy a DSA
  certificate into that location or properly configure a DSA
  certificate via dsa_cert_file without explicitly disabling the
  RSA certificate won't be able to start vsftpd. [bsc#975538]

OBS-URL: https://build.opensuse.org/request/show/618293
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=67
2018-06-25 09:34:14 +00:00
Peter Simons
4f5d42bc19 fix changelog
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=132
2018-06-21 11:41:30 +00:00
Peter Simons
3c1c0c1731 - Apply "vsftpd-support-dsa-only-setups.patch" to disable the
problematic default setting for rsa_cert_file. Upstream
  initializes that value to "/usr/share/ssl/certs/vsftpd.pem" and
  vsftpd won't start up if that file does not exist (or if does not
  contain an RSA certificate). Therefore, users who copy a DSA
  certificate into that location or properly configure a DSA
  certificate via dsa_cert_file without explicitly disabling the
  RSA certificate won't be able to start vsftpd. [bsc#975538]

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=131
2018-06-21 11:14:05 +00:00
Dominique Leuenberger
0ff270757a Accepting request 609848 from network
Don't start/stop parameterized systemd units in pre/post actions. These units
cannot be used without an explicit parameter and attempts to do so lead to a
confusing "failed to try-restart" error message. [bsc#1093179, bsc#1010177]

OBS-URL: https://build.opensuse.org/request/show/609848
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=66
2018-05-23 14:06:01 +00:00
Peter Simons
de62ebfe5c Fix change log.
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=129
2018-05-16 15:36:35 +00:00
Peter Simons
a8573409c6 Don't start/stop parameterized systemd units in pre/post actions. These units
cannot be used in such a way and the attempt leads to a confusing "failed to
try-restart" error message. [bsc#1089088]

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=128
2018-05-16 15:29:38 +00:00
Dominique Leuenberger
1cdf048fdc Accepting request 607030 from network
Enable wait4(), sysinfo(), and shutdown() syscalls in seccomp sandbox. These are required for the daemon to work properly on SLE-15. [bsc#1089088]

OBS-URL: https://build.opensuse.org/request/show/607030
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=65
2018-05-16 09:25:11 +00:00
Peter Simons
b45538659a fix change log
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=126
2018-05-14 11:53:14 +00:00
Peter Simons
137bff6e44 Enable wait4(), sysinfo(), and shutdown() syscalls in seccomp sandbox. These are required for the daemon to work properly on SLE-15. [bsc#1089088]
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=125
2018-05-14 11:49:10 +00:00
Dominique Leuenberger
a5f3d2152a Accepting request 593273 from network
OBS-URL: https://build.opensuse.org/request/show/593273
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=64
2018-04-06 15:43:01 +00:00
Tomáš Chvátal
4be5277927 Accepting request 593212 from home:vitezslav_cizek:branches:network
- Add firewalld service file (bsc#1083705)

OBS-URL: https://build.opensuse.org/request/show/593212
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=123
2018-04-03 14:56:04 +00:00
Dominique Leuenberger
67a5680337 Accepting request 556627 from network
- Make sure to also require group nobody and user ftp bsc#1070653

OBS-URL: https://build.opensuse.org/request/show/556627
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=63
2017-12-16 19:45:20 +00:00
Tomáš Chvátal
d2c5c6ef17 - Make sure to also require group nobody and user ftp bsc#1070653
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=121
2017-12-13 09:39:55 +00:00
Dominique Leuenberger
2eb78e3e0a Accepting request 523208 from network
- Add "vsftpd-die-with-session.patch" to fix a bug in vsftpd that
  would cause SSL protocol errors, aborting the connection, whenever
  system errors occurred that were supposed to be non-fatal.
  [bsc#1044292]

- Add "vsftpd-mdtm-in-utc.patch" to fix interoperability issue with
  various ftp clients that arose when vsftpd is configured with
  option "use_localtime=YES". Basically, it's fine to use local time
  stamps in directory listings, but responding to MDTM commands with
  any time zone other than UTC directly violates RFC3659 and leads
  FTP clients to misinterpret the file's time stamp. [bsc#1024961]

- Add "vsftpd-append-seek-pipe.patch" to allow the FTP server to
  append to a file system pipe. [bsc#1048427]

- Add "vsftpd-3.0.3-address_space_limit.patch" to create the new
  configuration option "address_space_limit", which determines the
  memory limit vsftpd configures for its own process (given in
  bytes). The previously hard-coded limit (100 MB) may not be
  sufficient for vsftpd servers running with certain PAM modules
  enabled, and in such cases administrators may wish to raise the
  limit to match their system's requirements. [bsc#1042137]

- Don't rely on the vsf_findlibs.sh script to figure out the list
  of libraries the build needs to link. The script is wildly
  unreliable and it's hard to predict what results it will produce.
  Also, the results it *does* produce are invisble in the build
  log. We stumbled across this issue when vsftpd suddendly had
  build failures on i586 platforms because the script decided to
  try and link "-lnsl" even though the library was neither
  installed nor required.  

- Drop the explicit specification of the LDFLAGS and LINK variables
  from the call to make. The value of LDFLAGS we passed is the
  default anyway and giving LINK has no effect since it's not used

OBS-URL: https://build.opensuse.org/request/show/523208
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=62
2017-09-14 19:09:29 +00:00
Peter Simons
f6c72fe663 - Don't rely on the vsf_findlibs.sh script to figure out the list
of libraries the build needs to link. The script is wildly
  unreliable and it's hard to predict what results it will produce.
  Also, the results it *does* produce are invisble in the build
  log. We stumbled across this issue when vsftpd suddendly had
  build failures on i586 platforms because the script decided to
  try and link "-lnsl" even though the library was neither
  installed nor required.  

- Drop the explicit specification of the LDFLAGS and LINK variables
  from the call to make. The value of LDFLAGS we passed is the
  default anyway and giving LINK has no effect since it's not used
  anywhere in the Makefile.

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=119
2017-09-11 13:02:10 +00:00
Peter Simons
6364c36bd6 Add "vsftpd-3.0.3-address_space_limit.patch" to create the new configuration option "address_space_limit", which determines the memory limit vsftpd configures for its own process (given in bytes). The previously hard-coded limit (100 MB) may not be sufficient for vsftpd servers running with certain PAM modules enabled, and in such cases administrators may wish to raise the limit to match their system's requirements. [bsc#1042137]
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=118
2017-09-08 07:29:34 +00:00
Peter Simons
ce43389ac4 Add "vsftpd-append-seek-pipe.patch" to allow the FTP server to append to a file system pipe. [bsc#1048427]
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=117
2017-09-07 14:51:06 +00:00
Peter Simons
eb840b0f5c Add "vsftpd-mdtm-in-utc.patch" to fix interoperability issue with various ftp clients that arose when vsftpd is configured with option "use_localtime=YES". Basically, it's fine to use local time stamps in directory listings, but responding to MDTM commands with any time zone other than UTC directly violates RFC3659 and leads FTP clients to misinterpret the file's time stamp. [bsc#1024961]
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=116
2017-09-07 13:55:51 +00:00
Peter Simons
cf6d32b00e Add "vsftpd-die-with-session.patch" to fix a bug in vsftpd that would cause SSL protocol errors, aborting the connection, whenever system errors occurred that were supposed to be non-fatal. [bsc#1044292]
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=115
2017-09-07 13:15:52 +00:00
Dominique Leuenberger
5739c62087 Accepting request 503674 from network
- Conditionally install xinetd service only on older releases
  * On current distributions we support the same functionality
    via systemd socket activation

- Fix build against OpenSSL 1.1. Remove lock on 1.0.x libs
  adds vsftpd-3.0.3-build-with-openssl-1.1.patch
  (bsc#1042673)

OBS-URL: https://build.opensuse.org/request/show/503674
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/vsftpd?expand=0&rev=61
2017-06-15 09:18:41 +00:00
Tomáš Chvátal
6bfb03fe57 - Conditionally install xinetd service only on older releases
* On current distributions we support the same functionality
    via systemd socket activation

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=113
2017-06-14 11:44:16 +00:00