[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
** Changed in: vsftpd (Ubuntu) Status: Confirmed => In Progress ** Changed in: vsftpd (Ubuntu) Assignee: (unassigned) => Robie Basak (racb) ** Also affects: vsftpd (Ubuntu Trusty) Importance: Undecided Status: New -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
Here's a debdiff to fix this bug in Utopic, but I'll work on and upload a merge instead. ** Patch added: "vsftpd.debdiff" https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+attachment/4099600/+files/vsftpd.debdiff -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
** Tags added: patch -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
** Description changed: + [Impact] + + vsftpd is broken by default. seccomp sandboxing is turned on by default, + and it doesn't work because it blocks itself from gettimeofday() calls + for logging. The workaround is to disable seccomp sandboxing, which + removes one layer of protection. vsftpd is security sensitive, so this + is far from ideal. + + [Development Fix] + + Patched the seccomp sandbox to permit gettimeofday() calls. Patch sent + upstream; no response received yet (24 hours, so a little early to + expect a response). + + dep8 test added to detect this in the future. + + [Stable Fix] + + Same as development fix. + + [Test Case] + + The included dep8 test automatically verifies the fix for this bug. + Manual steps: + + apt-get install vsftpd + ftp localhost + Press enter (to accept the default user) + + Expected result: password prompt + Actual result: 500 oops + + [Regression Potential] + + seccomp sandboxing does not appear to work at all (in the default + configuration, at least), and the patch only alters seccomp sandboxing. + Thus those not using seccomp sandboxing should not be affected. This is + a security sensitive patch, but the gettimeofday() call that is now + permitted can only receive the time and cannot do anything to the + system. + + It is possible that adding an extra call to the whitelist could overflow + something and break seccomp sandboxing in some drastic and insecure way, + but the code involved is relatively small and appears to have + appropriate bounds checking. + + [Workaround] + Adding seccomp_sandbox=NO to /etc/vsftpd.conf works around this issue but turns off the nice sandboxing feature. ProblemType: Bug DistroRelease: Ubuntu 13.10 Package: vsftpd 3.0.2-1ubuntu2 ProcVersionSignature: User Name 3.10.0-6.17-generic 3.10.3 Uname: Linux 3.10.0-6-generic x86_64 ApportVersion: 2.12.1-0ubuntu3 Architecture: amd64 Date: Mon Sep 2 14:20:38 2013 Ec2AMI: ami-008b Ec2AMIManifest: FIXME Ec2AvailabilityZone: nova Ec2InstanceType: m1.small Ec2Kernel: aki-0002 Ec2Ramdisk: ari-0002 MarkForUpload: True ProcEnviron: TERM=screen PATH=(custom, no user) XDG_RUNTIME_DIR= LANG=en_US.UTF-8 SHELL=/bin/bash SourcePackage: vsftpd UpgradeStatus: No upgrade log present (probably fresh install) vsftpd.log: Error: [Errno 13] Permission denied: '/var/log/vsftpd.log' ** Changed in: vsftpd (Ubuntu Trusty) Status: New => Triaged ** Changed in: vsftpd (Ubuntu Trusty) Importance: Undecided => High ** Changed in: vsftpd (Ubuntu Trusty) Assignee: (unassigned) => Robie Basak (racb) -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
The Utopic fix is in utopic-proposed, awaiting dep8 testing. I've uploaded the Trusty fix to trusty-proposed. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
** Branch linked: lp:~ubuntu-branches/ubuntu/utopic/vsftpd/utopic- proposed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
This bug was fixed in the package vsftpd - 3.0.2-14ubuntu1 --- vsftpd (3.0.2-14ubuntu1) utopic; urgency=medium * Merge from Debian testing. Remaining changes: - d/vsftpd.upstart: migrate vsftpd to upstart. + d/vsftpd.init: remove. - d/{control,rules,vsftpd.apport}: add apport hook. - Add debian/watch file. - d/p/ubuntu-disable-anonymous.patch: disable anonymous login by default. * Drop changes (adopted in Debian): - d/p/12-ubuntu-use-snakeoil-ssl.patch - d/p/13-disable-clone-newpid.patch * d/p/ubuntu-seccomp-gettimeofday.patch: permit gettimeofday() for logging calls (LP: #1219857). * Add dep8 test. -- Robie BasakTue, 29 Apr 2014 14:03:51 + ** Changed in: vsftpd (Ubuntu) Status: In Progress => Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
Hello James, or anyone else affected, Accepted vsftpd into trusty-proposed. The package will build now and be available at http://launchpad.net/ubuntu/+source/vsftpd/3.0.2-1ubuntu2.14.04.1 in a few hours, and then in the -proposed repository. Please help us by testing this new package. See https://wiki.ubuntu.com/Testing/EnableProposed for documentation how to enable and use -proposed. Your feedback will aid us getting this update out to other Ubuntu users. If this package fixes the bug for you, please add a comment to this bug, mentioning the version of the package you tested, and change the tag from verification-needed to verification-done. If it does not fix the bug for you, please add a comment stating that, and change the tag to verification-failed. In either case, details of your testing will help us make a better decision. Further information regarding the verification process can be found at https://wiki.ubuntu.com/QATeam/PerformingSRUVerification . Thank you in advance! ** Changed in: vsftpd (Ubuntu Trusty) Status: Triaged => Fix Committed ** Tags added: verification-needed -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
3.0.2-1ubuntu2.14.04.1 fixed the bug for me. Tested on amd64 with Linux 3.13.0-24-generic. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
** Branch linked: lp:ubuntu/trusty-proposed/vsftpd -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
** Tags removed: verification-needed ** Tags added: verification-done -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
This bug was fixed in the package vsftpd - 3.0.2-1ubuntu2.14.04.1 --- vsftpd (3.0.2-1ubuntu2.14.04.1) trusty; urgency=medium * d/p/ubuntu-seccomp-gettimeofday.patch: permit gettimeofday() for logging calls (LP: #1219857). * Add dep8 smoke test. -- Robie BasakTue, 29 Apr 2014 15:33:07 + ** Changed in: vsftpd (Ubuntu Trusty) Status: Fix Committed => Fix Released -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
I get the following errors: 500 OOPS: priv_sock_get_cmd and then on subsequent connections: 500 OOPS: child died -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
I also appear to only see this issue in virtualized servers; running on hardware appears to be OK. -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
Sep 2 14:25:51 vsftpd-debug kernel: [ 15.517149] type=1326 audit(1378131951.002:12): auid=4294967295 uid=65534 gid=65534 ses=4294967295 pid=1402 comm="vsftpd" sig=31 syscall=96 compat=0 ip=0x7fffacf79dff code=0x0 -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
[Bug 1219857] Re: vsftpd connections fail on amd64: "500 OOPS: child died"
This is also the cause of the DEP-8 test failures for squid3 on amd64. Marking 'Confirmed' as re-produced independently in testing. ** Changed in: vsftpd (Ubuntu) Status: New => Confirmed ** Changed in: vsftpd (Ubuntu) Importance: Undecided => High -- You received this bug notification because you are a member of Ubuntu Server Team, which is subscribed to vsftpd in Ubuntu. https://bugs.launchpad.net/bugs/1219857 Title: vsftpd connections fail on amd64: "500 OOPS: child died" To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/vsftpd/+bug/1219857/+subscriptions -- Ubuntu-server-bugs mailing list Ubuntu-server-bugs@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs