rpm/vsftpd
SHA256
1
0
Fork 0
forked from pool/vsftpd
Code Pull Requests Activity
110 Commits 1 Branch 0 Tags 792 KiB
a55fbc4786
Commit Graph

110 Commits

This Branch
This Branch
All Branches
Author SHA256 Message Date
Peter Simons
a55fbc4786 update to 3.0.4 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=149
 2021-06-29 09:15:03 +00:00
Dirk Mueller
475ab6e41e Accepting request 856827 from home:namtrac:branches:network 
Copied from SLE counterpart.

- Add seccomp-fixes.patch to allow getdents64 syscall in seccomp
  sandbox, fixes bsc#1179553
  Also in the same patch, fix the architecture offset from 4 to 5,
  this change was documented in https://lore.kernel.org/patchwork/patch/554803/

OBS-URL: https://build.opensuse.org/request/show/856827
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=147
 2021-01-16 15:15:09 +00:00
Peter Simons
3fa65078f1 implement SLE-4182 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=145
 2020-11-13 10:29:04 +00:00
Peter Simons
3eb7a9bc6b Accepting request 827815 from home:dimstar:Factory 
- Use %{_prefix}/lib instead of misused %{_libexecdir}.

OBS-URL: https://build.opensuse.org/request/show/827815
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=143
 2020-08-19 15:56:57 +00:00
Tomáš Chvátal
5cf3740e81 Accepting request 754432 from home:jmoellers:branches:network 
OBS-URL: https://build.opensuse.org/request/show/754432
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=141
 2019-12-05 14:20:01 +00:00
Peter Simons
6bfa53be29 fix segmentation fault 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=139
 2019-06-18 15:41:06 +00:00
Peter Simons
2a48a64ac1 Accepting request 709440 from home:dimstar:Factory 
Allow OBS to pick better candidates to shorten rebuild queues

OBS-URL: https://build.opensuse.org/request/show/709440
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=138
 2019-06-12 15:10:34 +00:00
Ismail Dönmez
13d75c7cdc Accepting request 644107 from home:cboltz:branches:network 
- firewall-macros should be BuildRequires, not Requires(post)
  (the macro gets expanded during package build)

Note: this bug / wrong dependency was probably introduced by
    - Add firewalld service file (bsc#1083705)
which I can't access :-(

If similar changes were applied to other packages, please also fix them ;-)

OBS-URL: https://build.opensuse.org/request/show/644107
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=136
 2018-10-24 08:00:33 +00:00
Peter Simons
7c1820fc2a document address_space_limit 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=134
 2018-06-28 16:02:18 +00:00
Peter Simons
4f5d42bc19 fix changelog 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=132
 2018-06-21 11:41:30 +00:00
Peter Simons
3c1c0c1731 - Apply "vsftpd-support-dsa-only-setups.patch" to disable the 
problematic default setting for rsa_cert_file. Upstream
  initializes that value to "/usr/share/ssl/certs/vsftpd.pem" and
  vsftpd won't start up if that file does not exist (or if does not
  contain an RSA certificate). Therefore, users who copy a DSA
  certificate into that location or properly configure a DSA
  certificate via dsa_cert_file without explicitly disabling the
  RSA certificate won't be able to start vsftpd. [bsc#975538]

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=131
 2018-06-21 11:14:05 +00:00
Peter Simons
de62ebfe5c Fix change log. 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=129
 2018-05-16 15:36:35 +00:00
Peter Simons
a8573409c6 Don't start/stop parameterized systemd units in pre/post actions. These units 
cannot be used in such a way and the attempt leads to a confusing "failed to
try-restart" error message. [bsc#1089088]

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=128
 2018-05-16 15:29:38 +00:00
Peter Simons
b45538659a fix change log 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=126
 2018-05-14 11:53:14 +00:00
Peter Simons
137bff6e44 Enable wait4(), sysinfo(), and shutdown() syscalls in seccomp sandbox. These are required for the daemon to work properly on SLE-15. [bsc#1089088] 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=125
 2018-05-14 11:49:10 +00:00
Tomáš Chvátal
4be5277927 Accepting request 593212 from home:vitezslav_cizek:branches:network 
- Add firewalld service file (bsc#1083705)

OBS-URL: https://build.opensuse.org/request/show/593212
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=123
 2018-04-03 14:56:04 +00:00
Tomáš Chvátal
d2c5c6ef17 - Make sure to also require group nobody and user ftp bsc#1070653 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=121
 2017-12-13 09:39:55 +00:00
Peter Simons
f6c72fe663 - Don't rely on the vsf_findlibs.sh script to figure out the list 
of libraries the build needs to link. The script is wildly
  unreliable and it's hard to predict what results it will produce.
  Also, the results it *does* produce are invisble in the build
  log. We stumbled across this issue when vsftpd suddendly had
  build failures on i586 platforms because the script decided to
  try and link "-lnsl" even though the library was neither
  installed nor required.  

- Drop the explicit specification of the LDFLAGS and LINK variables
  from the call to make. The value of LDFLAGS we passed is the
  default anyway and giving LINK has no effect since it's not used
  anywhere in the Makefile.

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=119
 2017-09-11 13:02:10 +00:00
Peter Simons
6364c36bd6 Add "vsftpd-3.0.3-address_space_limit.patch" to create the new configuration option "address_space_limit", which determines the memory limit vsftpd configures for its own process (given in bytes). The previously hard-coded limit (100 MB) may not be sufficient for vsftpd servers running with certain PAM modules enabled, and in such cases administrators may wish to raise the limit to match their system's requirements. [bsc#1042137] 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=118
 2017-09-08 07:29:34 +00:00
Peter Simons
ce43389ac4 Add "vsftpd-append-seek-pipe.patch" to allow the FTP server to append to a file system pipe. [bsc#1048427] 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=117
 2017-09-07 14:51:06 +00:00
Peter Simons
eb840b0f5c Add "vsftpd-mdtm-in-utc.patch" to fix interoperability issue with various ftp clients that arose when vsftpd is configured with option "use_localtime=YES". Basically, it's fine to use local time stamps in directory listings, but responding to MDTM commands with any time zone other than UTC directly violates RFC3659 and leads FTP clients to misinterpret the file's time stamp. [bsc#1024961] 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=116
 2017-09-07 13:55:51 +00:00
Peter Simons
cf6d32b00e Add "vsftpd-die-with-session.patch" to fix a bug in vsftpd that would cause SSL protocol errors, aborting the connection, whenever system errors occurred that were supposed to be non-fatal. [bsc#1044292] 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=115
 2017-09-07 13:15:52 +00:00
Tomáš Chvátal
6bfb03fe57 - Conditionally install xinetd service only on older releases 
* On current distributions we support the same functionality
    via systemd socket activation

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=113
 2017-06-14 11:44:16 +00:00
Peter Simons
33ca05c450 Accepting request 503275 from home:dmolkentin:branches:network 
- Fix build against OpenSSL 1.1. Remove lock on 1.0.x libs
  adds vsftpd-3.0.3-build-with-openssl-1.1.patch
  (bsc#1042673)

OBS-URL: https://build.opensuse.org/request/show/503275
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=112
 2017-06-12 22:37:25 +00:00
Peter Simons
46b63b2299 Explicitly depend on OpenSSL version 1.0.x since vsftpd doesn't compile against 
the API provided by newer versions.

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=110
 2017-05-31 15:30:59 +00:00
Thorsten Kukuk
ac2e1d899b Accepting request 492473 from home:kukuk:branches:network 
- Adjust to new system user/group RPMs

OBS-URL: https://build.opensuse.org/request/show/492473
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=108
 2017-05-02 12:29:24 +00:00
Peter Simons
ffdb3d153b Add vsftpd-3.0.2-fix-chown-uploads.patch to fix a bug in vsftpd where files 
uploaded by an anonymous user could not be chown()ed to the desired UID as
specified in the daemon's configuration file. [bnc#996370]

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=106
 2016-09-19 11:43:40 +00:00
Peter Simons
d7c40746c4 Accepting request 424074 from home:dimstar:Factory 
Fix build with libcap, which moved the lib from /lib64 to /usr/lib64 (see Staging:C)

OBS-URL: https://build.opensuse.org/request/show/424074
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=104
 2016-08-31 18:18:20 +00:00
Tomáš Chvátal
695d541dab - Do not bother with omc xml configs, useless nowdays 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=102
 2016-08-05 11:28:08 +00:00
Tomáš Chvátal
cb9d86623b OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=100 2016-03-28 19:50:09 +00:00
Tomáš Chvátal
88812d6821 - Require shadow and do not output the error out of useradd 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=99
 2016-03-23 10:08:13 +00:00
Tomáš Chvátal
5378e1f66e bnc#972169 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=98
 2016-03-22 14:58:51 +00:00
Tomáš Chvátal
74d07aeab6 OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=97 2016-03-22 14:29:23 +00:00
Tomáš Chvátal
04364bf0b8 - Fix bnc#970982 hanging on pam_exec in pam.d 
* Add patch vsftpd-3.0.2-wnohang.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=96
 2016-03-21 12:54:56 +00:00
Tomáš Chvátal
5578944fcf - Fix memory leaks in ls.c bnc#968138 
* Add patch vsftpd-ls-memleak.patch
  * Update patch vsftpd-path-normalize.patch
- Fix wildcard ? matching bnc#969411
  * Update patch vsftpd-2.3.4-sqb.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=94
 2016-03-10 18:20:17 +00:00
Tomáš Chvátal
44ffe22ac1 - Clean-up the init.d support to be bit more readable and add missing dep 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=92
 2015-09-21 11:35:52 +00:00
Tomáš Chvátal
71ffe127d6 Accepting request 332591 from home:worldcitizen:branches:network 
Brought back additional systemv support so it also builds for SLES 10 and 11

OBS-URL: https://build.opensuse.org/request/show/332591
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=91
 2015-09-21 11:27:21 +00:00
Tomáš Chvátal
7cbe902ddd - Version bump to 3.0.3: 
* Increase VSFTP_AS_LIMIT to 200MB; various reports.
  * Make the PWD response more RFC compliant; report from Barry Kelly
    <barry@modeltwozero.com>.
  * Remove the trailing period from EPSV response to work around BT Internet
    issues; report from Tim Bishop <tdb@mirrorservice.org>.
  * Fix syslog_enable issues vs. seccomp filtering. Report from Michal Vyskocil
    <mvyskocil@suse.cz>. At least, syslogging seems to work on my Fedora now.
  * Allow gettimeofday() in the seccomp sandbox. I can't repro failures, but I
    probably have a different distro / libc / etc. and there are multiple reports.
  * Some kernels support PR_SET_NO_NEW_PRIVS but not PR_SET_SECCOMP, so handle
    this case gracefully. Report from Vasily Averin <vvs@odin.com>.
  * List the TLS1.2 cipher AES128-GCM-SHA256 as first preference by default.
  * Make some compile-time SSL defaults (such as correct client shutdown
    handling) stricter.
  * Disable Nagle algorithm during SSL data connection shutdown, to avoid 200ms
    delays. From Tim Kosse <tim.kosse@filezilla-project.org>.
  * Kill the FTP session if we see HTTP protocol commands, to avoid
    cross-protocol attacks. A report from Jann Horn <jann@thejh.net>.
  * Kill the FTP session if we see session re-use failure. A report from
    Tim Kosse <tim.kosse@filezilla-project.org>.
  * Enable ECDHE, Tim Kosse <tim.kosse@filezilla-project.org>.
  * Default cipher list is now just ECDHE-RSA-AES256-GCM-SHA384.
  * Minor SSL logging improvements.
  * Un-default tunable_strict_ssl_write_shutdown again. We still have
    tunable_strict_ssl_read_eof defaulted now, which is the important one to prove
    upload integrity.
- Drop patch vsftpd-allow-dev-log-socket.patch should be included
  upstream, se above bullet with mvyskocil's email

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=89
 2015-09-08 11:05:12 +00:00
Tomáš Chvátal
b1b099bd31 OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=87 2015-06-23 11:59:00 +00:00
Tomáš Chvátal
00561d057d - Fix logrotate script to not fail when vsftpd is not running, 
bnc#935279

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=86
 2015-06-23 08:52:14 +00:00
Tomáš Chvátal
e99b855311 - Fix hide_file option wrt bnc#927612: 
* vsftpd-path-normalize.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=84
 2015-04-17 16:36:11 +00:00
Tomáš Chvátal
1cbf7ab3a0 ENOENT, ensure we sent both dir+file to filter verification: 
OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=82
 2015-04-05 11:40:52 +00:00
Tomáš Chvátal
e939f108e5 OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=81 2015-04-05 10:35:19 +00:00
Tomáš Chvátal
abd20973e8 - bnc#925963 stat is sometimes run on wrong path and results with 
ENOENT:
  * vsftpd-path-normalize.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=80
 2015-04-05 10:34:03 +00:00
Tomáš Chvátal
ef6c0131cb - Update patch bit more for sanity checks. Done by rsassu@suse.de: 
* vsftpd-path-normalize.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=79
 2015-03-25 10:08:56 +00:00
Tomáš Chvátal
6cd1b030f0 OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=78 2015-03-25 08:45:22 +00:00
Tomáš Chvátal
915fc9626d OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=77 2015-03-23 20:59:56 +00:00
Tomáš Chvátal
fa040448aa - Add back patch attempting to fix bnc#900326 bnc#915522 and 
bnc#922538:
  * vsftpd-path-normalize.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=76
 2015-03-23 20:22:32 +00:00
Tomáš Chvátal
8c317ca736 - Reset filter patch to match fedora, my work will be restarted 
in one-off patch to make the changes stand out. Add rest of
  RH filtering patches:
  * vsftpd-2.2.0-wildchar.patch
  * vsftpd-2.3.4-sqb.patch
  * vsftpd-2.1.0-filter.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=75
 2015-03-23 20:10:51 +00:00
Tomáš Chvátal
c67fd3688c - Work on the filter patch and split out the normalisation of the 
path to separate str function, currently commented out so I
  avoid huge diffing.
  * vsftpd-2.1.0-filter.patch

OBS-URL: https://build.opensuse.org/package/show/network/vsftpd?expand=0&rev=74
 2015-03-23 19:57:06 +00:00