Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 34757 - Updated pure-ftpd section
Summary: Updated pure-ftpd section
Status: RESOLVED FIXED
Alias: None
Product: [OLD] Docs-user
Classification: Unclassified
Component: Gentoo Security Guide (show other bugs)
Hardware: All All
: High normal (vote)
Assignee: Erwin (RETIRED)
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2003-11-30 06:12 UTC by Sune Kloppenborg Jeppesen
Modified: 2003-12-04 01:16 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Fix for bug. (gentoo-security-1.34-pure-ftpd.diff,947 bytes, patch)
2003-11-30 06:13 UTC, Sune Kloppenborg Jeppesen 		Details | Diff
gentoo-security.xml.diff (gentoo-security.xml.diff,908 bytes, patch)
2003-12-02 03:11 UTC, Erwin (RETIRED) 		Details | Diff
Show Obsolete (1) View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Sune Kloppenborg Jeppesen 2003-11-30 06:12:12 UTC 
-Removed entries that are already in the default /etc/conf.d/pure-ftpd file.
-Added -s falg to MISC_OTHER
Comment 1 Sune Kloppenborg Jeppesen 2003-11-30 06:13:07 UTC 
Created attachment 21505 [details, diff]
Fix for bug.
Comment 2 Erwin (RETIRED) gentoo-dev 2003-12-02 03:08:20 UTC 
From `man pure-ftpd`:
"...
-s     Don't  allow  anonymous  users  to retrieve files owned by "ftp"
              (generally, files uploaded by other anonymous users).
..."

I think -s is redundant, since there's already -E flag to not allow anonymous user to connect to ftpd. However, i agree with removing some entries that are not relevant to previous paragraph (it mentions about AUTH only).
Comment 3 Erwin (RETIRED) gentoo-dev 2003-12-02 03:11:30 UTC 
Created attachment 21581 [details, diff]
gentoo-security.xml.diff

If a docdev can review?
Comment 4 Sven Vermeulen (RETIRED) gentoo-dev 2003-12-03 08:00:04 UTC 
Patch looks sane.
Comment 5 Erwin (RETIRED) gentoo-dev 2003-12-04 01:16:48 UTC 
committed. Thanks for reporting.