Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 149606 - net-ftp/proftpd-1.3.0-r2 creates both proftpd and ftp users
Summary: net-ftp/proftpd-1.3.0-r2 creates both proftpd and ftp users
Status: RESOLVED INVALID
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: [OLD] Server (show other bugs)
Hardware: All Linux
: High normal
Assignee: Luca Longinotti (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2006-09-30 03:54 UTC by Petteri Räty (RETIRED)
Modified: 2006-09-30 07:47 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Petteri Räty (RETIRED) gentoo-dev 2006-09-30 03:54:35 UTC
pkg_setup function from proftpd creates the proftpd user and proftpd depends on ftpbase which creates a ftp user. IMHO only one ftp related user should be created and used.

Portage 2.1.1 (hardened/x86/2.6, gcc-3.4.6, glibc-2.3.6-r4, 2.6.16-hardened-r10 i686)
=================================================================
System uname: 2.6.16-hardened-r10 i686 AMD Athlon(tm) XP 2600+
Gentoo Base System version 1.12.5
Last Sync: Fri, 29 Sep 2006 23:50:01 +0000
distcc 2.18.3 i686-pc-linux-gnu (protocols 1 and 2) (default port 3632) [disabled]
ccache version 2.3 [disabled]
app-admin/eselect-compiler: [Not Present]
dev-java/java-config: 1.2.11-r1
dev-lang/python:     2.4.3-r4
dev-python/pycrypto: 2.0.1-r5
dev-util/ccache:     2.3
dev-util/confcache:  [Not Present]
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.59-r7
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2
sys-devel/binutils:  2.16.1-r3
sys-devel/gcc-config: 1.3.13-r3
sys-devel/libtool:   1.5.22
virtual/os-headers:  2.6.17-r1
ACCEPT_KEYWORDS="x86"
AUTOCLEAN="yes"
CBUILD="i686-pc-linux-gnu"
CFLAGS="-O2 -march=athlon-xp -pipe -fomit-frame-pointer"
CHOST="i686-pc-linux-gnu"
CONFIG_PROTECT="/etc"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/init.d /etc/java-config/vms/ /etc/revdep-rebuild /etc/terminfo"
CXXFLAGS="-O2 -march=athlon-xp -pipe -fomit-frame-pointer"
DISTDIR="/usr/src/distfiles"
FEATURES="autoconfig collision-protect distlocks metadata-transfer parallel-fetch sandbox sfperms strict"
GENTOO_MIRRORS=" http://trumpetti.atm.tut.fi/gentoo http://lame.lut.fi/linux/gentoo "
LC_ALL="en_US.UTF-8"
LINGUAS=""
PKGDIR="/usr/portage//packages/x86/"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude='/distfiles' --exclude='/local' --exclude='/packages'"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage/"
PORTDIR_OVERLAY="/usr/local/foobar"
SYNC="rsync://rsync.europe.gentoo.org/gentoo-portage"
USE="3dnow 3dnowex acl acpi apache2 bash-completion berkdb bzip2 bzlib cdr crypt cups dlloader elibc_glibc gpm hardened input_devices_keyboard input_devices_mouse kernel_linux makecheck mmx nls nptl pam pic ppds readline sse ssl tcpd unicode usb userland_GNU userlocales vhosts x86 xorg zlib"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LDFLAGS, MAKEOPTS, PORTAGE_RSYNC_EXTRA_OPTS
Comment 1 Luca Longinotti (RETIRED) gentoo-dev 2006-09-30 07:47:02 UTC
Those are two different things, and come, as you noted, from different packages.
ftp user is the user for anonymous ftp and such stuff.
proftpd user is the user with which the ProFTPd daemon runs, running it as root isn't good, so it had to be a user-account... The sample config file always stated it to be a "proftpd" user, BUT it never created it, so the "out-of-the-box-works" principle was broken, I simply fixed this by correctly adding that user.
Again: it is an unrelated user to make the daemon work out-of-the-box in a secury way.
Best regards, CHTEKK.