linux/meta-openembedded.git/meta-networking/recipes-daemons/vsftpd, branch rocko

vsftpd: link with wrap when tcp-wrappers configured

2017-09-12T14:55:09+00:00

By default we do not build vsftpd with tcp-wrappers, so we should not include lib wrap. Make lib wrap optional depending on tcp-wrappers PACKAGECONFIG. Signed-off-by: Athanasios Oikonomou Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

vsftpd: Fix build with musl

2017-04-25T19:55:36+00:00

Signed-off-by: Khem Raj Signed-off-by: Joe MacDonald

vsftpd: allow sysinfo() in the seccomp sandbox

2016-09-12T14:43:38+00:00

* Allow sysinfo() in the seccomp sandbox otherwise comes below OOPS: priv_sock_get_cmd as the syscall sysinfo() not allowed tnftp 192.168.1.1 Connected to 192.168.1.1. 220 (vsFTPd 3.0.3) Name (192.168.1.1:root): anonymous 331 Please specify the password. Password: 230 Login successful. Remote system type is UNIX. Using binary mode to transfer files. ftp> prompt Interactive mode off. ftp> mget small* OOPS: priv_sock_get_cmd * use "strace -ff /usr/sbin/vsftpd" to track in both seccomp sandbox on and seccomp sandbox off (add seccomp_sandbox=NO in /etc/vsftpd.conf) scenarios when type the commands at ftp client as above, the ftp connection at server side ends up each time with SIGSYS when call sysinfo() syscall in seccomp sandbox on case, so we need to add sysinfo() in the seccomp sandbox if still use seccomp sandbox for vsftpd * The issue still exists in other distribution, Please check https://bugzilla.redhat.com/show_bug.cgi?id=845980 for details And check ftp://195.220.108.108/linux/fedora/linux/updates/\ 24/SRPMS/p/proftpd-1.3.5b-2.fc24.src.rpm for fedora, there is even a patch vsftpd-3.0.2-seccomp.patch as below to turn off seccomp sandbox for vsftpd by default which also means fedora doesn't limit the syscall any more by default. From dd86a1c28f11fa67b1263d5dc79fa9953629d30d Mon Sep 17 00:00:00 2001 From: Martin Sehnoutka Date: Fri, 8 Apr 2016 15:03:16 +0200 Subject: [PATCH 1/7] vsftpd-3.0.2-seccomp --- tunables.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/tunables.c b/tunables.c index 93f85b1..b024be4 100644 --- a/tunables.c +++ b/tunables.c @@ -232,7 +232,7 @@ tunables_load_defaults() tunable_isolate_network = 1; tunable_ftp_enable = 1; tunable_http_enable = 0; - tunable_seccomp_sandbox = 1; + tunable_seccomp_sandbox = 0; tunable_allow_writeable_chroot = 0; tunable_accept_timeout = 60; Signed-off-by: Mingli Yu Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

meta-oe: fix indentation

2016-08-22T13:56:28+00:00

* remove tabs which sneaked in since last cleanup * meta-oe layers are using consistent indentation with 4 spaces, see http://www.openembedded.org/wiki/Styleguide Signed-off-by: Martin Jansa

meta-networking: use bb.utils.contains() instead of base_contains()

2016-05-05T15:41:28+00:00

base_contains() is a compatibility wrapper and may warn in the future, so replace all instances with bb.utils.contains(). Signed-off-by: Ross Burton Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

vsftpd: Explicitly set EXTRA_OEMAKE as required

2016-02-22T20:51:19+00:00

This recipe currently relies on EXTRA_OEMAKE having been to set to "-e MAKEFLAGS=" in bitbake.conf to operate. It is necessary to make this explicit so that the default in bitbake.conf can be changed. Signed-off-by: Mike Crowe Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

vsftpd: upgrade 3.0.2->3.0.3

2015-08-06T19:44:10+00:00

Signed-off-by: Lei Maohui Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

meta-networking: standardize SECTION values

2015-06-06T00:42:25+00:00

SECTION has been used inconsistently throughout the recipes in this layer. Convert them to all use the same convention. Signed-off-by: Joe MacDonald

vsftpd: fix the CVE-2015-1419

2015-05-08T15:06:47+00:00

Taken Patch from fedora to fix CVE-2015-1419, deny_file parsing to do more what is expected. Signed-off-by: Roy Li Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald

vsftpd / init: add LSB init infos

2015-04-16T02:42:37+00:00

Keep compatibility with chkconfig tool. Signed-off-by: Wenzong Fan Signed-off-by: Martin Jansa Signed-off-by: Joe MacDonald