Control: tags 1104531 + patch Hi,
attached is a patch to update README.Debian. I think this is preferable over changing the actual defaults. I propose to upload this in a few days. Chris
diff -Nru vsftpd-3.0.5/debian/changelog vsftpd-3.0.5/debian/changelog --- vsftpd-3.0.5/debian/changelog 2025-01-15 12:19:33.000000000 +0100 +++ vsftpd-3.0.5/debian/changelog 2025-05-02 13:17:12.000000000 +0200 @@ -1,3 +1,11 @@ +vsftpd (3.0.5-0.2) unstable; urgency=medium + + * Non-maintainer upload. + * Correct README.Debian with regard to local and anonymous logins. + (Closes: #1104531) + + -- Chris Hofstaedtler <z...@debian.org> Fri, 02 May 2025 13:17:12 +0200 + vsftpd (3.0.5-0.1) unstable; urgency=medium * Non-maintainer upload. diff -Nru vsftpd-3.0.5/debian/vsftpd.README.Debian vsftpd-3.0.5/debian/vsftpd.README.Debian --- vsftpd-3.0.5/debian/vsftpd.README.Debian 2014-05-07 22:17:52.000000000 +0200 +++ vsftpd-3.0.5/debian/vsftpd.README.Debian 2025-05-02 13:16:46.000000000 +0200 @@ -1,9 +1,10 @@ Notes on the vsftpd package =========================== -If you want to allow local users to log in via FTP (not a good option -on any public network, since FTP relies upon cleartext passwords), you -should uncomment the "local_enable" line in /etc/vsftpd.conf. +In Debian's default configuration, anonymous logins are disabled, and +local user login is enabled. Note that FTP transmits passwords in cleartext, +so you probably do not want to use it over public networks. +To disable local user login, disable "local_enable" in /etc/vsftpd.conf.
