Hello community, here is the log from the commit of package vsftpd for openSUSE:Factory checked in at 2013-03-07 07:35:30 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Comparing /work/SRC/openSUSE:Factory/vsftpd (Old) and /work/SRC/openSUSE:Factory/.vsftpd.new (New) ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "vsftpd", Maintainer is "mvysko...@suse.com" Changes: -------- --- /work/SRC/openSUSE:Factory/vsftpd/vsftpd.changes 2013-03-01 09:06:03.000000000 +0100 +++ /work/SRC/openSUSE:Factory/.vsftpd.new/vsftpd.changes 2013-03-07 07:35:31.000000000 +0100 @@ -1,0 +2,6 @@ +Thu Feb 28 16:02:17 UTC 2013 - lnus...@suse.de + +- add isolate_network and seccomp_sandbox options to template to make them + easier to find (bnc#786024) + +------------------------------------------------------------------- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ Other differences: ------------------ ++++++ vsftpd-2.3.5-conf.patch ++++++ --- /var/tmp/diff_new_pack.TOdHrP/_old 2013-03-07 07:35:33.000000000 +0100 +++ /var/tmp/diff_new_pack.TOdHrP/_new 2013-03-07 07:35:33.000000000 +0100 @@ -1,7 +1,7 @@ Index: vsftpd.conf =================================================================== ---- vsftpd.conf.orig 2011-12-17 19:24:40.000000000 +0100 -+++ vsftpd.conf 2012-04-11 10:19:06.192238657 +0200 +--- vsftpd.conf.orig ++++ vsftpd.conf @@ -4,23 +4,89 @@ # loosens things up a bit, to make the ftp daemon more usable. # Please see vsftpd.conf.5 for all compiled in defaults. @@ -98,7 +98,7 @@ # Uncomment this to allow the anonymous FTP user to upload files. This only # has an effect if the above global write enable is activated. Also, you will # obviously need to create a directory writable by the FTP user. -@@ -30,15 +96,9 @@ +@@ -30,15 +96,9 @@ anonymous_enable=YES # new directories. #anon_mkdir_write_enable=YES # @@ -117,7 +117,7 @@ # # If you want, you can arrange for uploaded anonymous files to be owned by # a different user. Note! Using "root" for uploaded files is not -@@ -46,24 +106,51 @@ +@@ -46,24 +106,51 @@ connect_from_port_20=YES #chown_uploads=YES #chown_username=whoever # @@ -174,7 +174,7 @@ # Enable this and the server will recognise asynchronous ABOR requests. Not # recommended for security (the code is non-trivial). Not enabling it, # however, may confuse older FTP clients. -@@ -77,41 +164,29 @@ +@@ -77,41 +164,34 @@ connect_from_port_20=YES # predicted this attack and has always been safe, reporting the size of the # raw file. # ASCII mangling is a horrible feature of the protocol. @@ -231,3 +231,8 @@ +# Limit passive ports to this range to assis firewalling +pasv_min_port=30000 +pasv_max_port=30100 ++ ++# security features that are incompatible with some other settings. Try to ++# uncomment if vsftpd dies with weird errors. ++#isolate_network=NO ++#seccomp_sandbox=NO -- To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org For additional commands, e-mail: opensuse-commit+h...@opensuse.org