Severity: important
Package: vsftpd
Version: 3.0.2-17

The vsftpd.conf(5) manual page says that the default value for the
"listen" configuration file option is "NO" but in reality it's "YES",
as we can see from the line 185 in tunables.c:

  tunable_listen = 1;

What's worse, this seems to be a change introduced during the Jessie
development cycle as on the box I've upgraded to Jessie (to vsftpd
3.0.2-17) I had both "listen" and "listen_v6" commented out and using
inetd for running vsftpd. The upgrade stopped vsftpd from functioning
as it tried to open its port 20 for listening after being spawned by
inetd, and failed, reporting "500 OOPS: could not bind listening IPv4
socket" to the connected client.

Hence what I would propose is to revert the change enabling "listen" by
default to not break upgrades for those who relied on the defaults as
they were in Wheezy and is running vsftpd via inetd.

Otherwise, the manual page should be fixed and supposedly NEWS.Debian
updated as well.

I tried to locate the vsftpd's source code repository, but failed; the
Debian's Git repo contains only the most recent version, 3.0.2, in its
"upstream" branch so I have no idea how should I try to see whether
vsftpd itself had its defaults for the "listen" option changed since
the version packaged in Wheezy.  The changelog available on the
upstream website only mentions the word "listen" in the entry for some
very old version -- much older than that in Wheezy.

----

(The following text discusses a problem supposedly tangential to the
essense of my bug report but including it anyway.)

The closest existing Debian bug I've managed to find is
#574837 [1] which basically amounted with tinkering with the
configuration file while not touching the code,
and the code currently has

  tunable_listen = 1;
  tunable_listen_ipv6 = 0;

While this might not relate to the problem at hand, I reckon the patch
applied from #574837 should also be extended to reverse the values of
the affected options in tunables.c, as I indicated above.

1. https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=574837


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to