Package: proftpd-basic Version: 1.3.2a-1 Severity: normal
Hello! New version of proftpd dont parse the <Limit> directive correctly. here is an example: <Directory /home/ftp/dir1> <Limit ALL> DenyAll </Limit> <Limit DIRS> AllowUser superuser </Limit> </Directory> <Directory /home/ftp/dir1/dir2> <Limit ALL> DenyAll </Limit> <Limit RETR DELE RMD> AllowUser superuser </Limit> <Limit MKD STOR APPE DIRS> AllowUser user1 AllowUser superuser </Limit> </Directory> proftp 1.3.1 (from lenny proftpd-basic_1.3.1-17lenny2_i386.deb) works like in the documentation and give expected result: superuser can do MKD DELE RETR RMD STOR DIRS commands in "dir2" user1 only can MKD STOR APPE DIRS commands in "dir2" New version (1.3.2a-1 debian, and maybe in the mainstrem) cant parse this well and superuser can do: DELE RETR STORE DIRS commmands in "dir2" but cant MKD and RMD user1 only can STOR APPE DIRS commands in "dir2" but cant MKD MKD and RMD command failed, if downgrade the package to 1.3.1 the commands works well. I debug with DebugLevel 9 and try TraceLog but cant find more useful information in these logs (logs created, and contains informations but not relevant to this issue). Thanks, Willy -- System Information: Debian Release: squeeze/sid APT prefers unstable APT policy: (1001, 'unstable'), (500, 'testing'), (100, 'stable'), (50, 'experimental') Architecture: i386 (i686) Kernel: Linux 2.6.31-rc6 (SMP w/4 CPU cores) Locale: LANG=hu_HU, LC_CTYPE=hu_HU (charmap=ISO-8859-2) Shell: /bin/sh linked to /bin/bash Versions of packages proftpd-basic depends on: ii adduser 3.110 add and remove users and groups ii debconf 1.5.27 Debian configuration management sy ii debianutils 3.2.1 Miscellaneous utilities specific t ii libacl1 2.2.48-1 Access control list shared library ii libattr1 1:2.4.44-1 Extended attribute shared library ii libc6 2.9-26 GNU C Library: Shared libraries ii libcap2 1:2.16-5 support for getting/setting POSIX. ii libncurses5 5.7+20090803-2 shared libraries for terminal hand ii libpam-runtime 1.1.0-2 Runtime support for the PAM librar ii libpam0g 1.1.0-2 Pluggable Authentication Modules l ii libssl0.9.8 0.9.8k-4 SSL shared libraries ii libwrap0 7.6.q-18 Wietse Venema's TCP wrappers libra ii netbase 4.37 Basic TCP/IP networking system ii sed 4.2.1-3 The GNU sed stream editor ii ucf 3.0021 Update Configuration File: preserv ii xinetd [inet-superserver] 1:2.3.14-7 replacement for inetd with many en proftpd-basic recommends no packages. Versions of packages proftpd-basic suggests: ii openssl 0.9.8k-4 Secure Socket Layer (SSL) binary a ii proftpd-doc 1.3.2a-1.1 Versatile, virtual-hosting FTP dae pn proftpd-mod-ldap <none> (no description available) pn proftpd-mod-mysql <none> (no description available) pn proftpd-mod-odbc <none> (no description available) pn proftpd-mod-pgsql <none> (no description available) pn proftpd-mod-sqlite <none> (no description available) -- debconf information excluded -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org