Package: proftpd-basic
Version: 1.3.2a-1
Severity: normal

Hello!

New version of proftpd dont parse the <Limit> directive correctly.
here is an example:

<Directory /home/ftp/dir1>
                <Limit ALL>
                  DenyAll
                </Limit>
                <Limit DIRS>
                  AllowUser superuser
                </Limit>
</Directory>

<Directory /home/ftp/dir1/dir2>
                <Limit ALL>
                  DenyAll
                </Limit>
                <Limit RETR DELE RMD>
                  AllowUser superuser
                </Limit>
                <Limit MKD STOR APPE DIRS>
                  AllowUser user1
                  AllowUser superuser
                </Limit>
</Directory>

proftp 1.3.1 (from lenny proftpd-basic_1.3.1-17lenny2_i386.deb)  works like
in the documentation and give expected result:
superuser can do MKD DELE RETR  RMD STOR DIRS commands in "dir2" 
user1 only can MKD STOR APPE DIRS commands in "dir2"

New version (1.3.2a-1 debian, and maybe in the mainstrem) cant parse this
well and
superuser can do: DELE RETR STORE DIRS commmands in "dir2" but cant MKD and RMD
user1 only can STOR APPE DIRS commands in "dir2" but cant MKD

MKD and RMD command failed, if downgrade the package to 1.3.1 the commands works
well.
I debug with DebugLevel 9 and try TraceLog but cant find more useful
information in these logs (logs created, and contains informations but not
relevant to this issue).

Thanks,
Willy

-- System Information:
Debian Release: squeeze/sid
  APT prefers unstable
  APT policy: (1001, 'unstable'), (500, 'testing'), (100, 'stable'), (50, 
'experimental')
Architecture: i386 (i686)

Kernel: Linux 2.6.31-rc6 (SMP w/4 CPU cores)
Locale: LANG=hu_HU, LC_CTYPE=hu_HU (charmap=ISO-8859-2)
Shell: /bin/sh linked to /bin/bash

Versions of packages proftpd-basic depends on:
ii  adduser                   3.110          add and remove users and groups
ii  debconf                   1.5.27         Debian configuration management sy
ii  debianutils               3.2.1          Miscellaneous utilities specific t
ii  libacl1                   2.2.48-1       Access control list shared library
ii  libattr1                  1:2.4.44-1     Extended attribute shared library
ii  libc6                     2.9-26         GNU C Library: Shared libraries
ii  libcap2                   1:2.16-5       support for getting/setting POSIX.
ii  libncurses5               5.7+20090803-2 shared libraries for terminal hand
ii  libpam-runtime            1.1.0-2        Runtime support for the PAM librar
ii  libpam0g                  1.1.0-2        Pluggable Authentication Modules l
ii  libssl0.9.8               0.9.8k-4       SSL shared libraries
ii  libwrap0                  7.6.q-18       Wietse Venema's TCP wrappers libra
ii  netbase                   4.37           Basic TCP/IP networking system
ii  sed                       4.2.1-3        The GNU sed stream editor
ii  ucf                       3.0021         Update Configuration File: preserv
ii  xinetd [inet-superserver] 1:2.3.14-7     replacement for inetd with many en

proftpd-basic recommends no packages.

Versions of packages proftpd-basic suggests:
ii  openssl                       0.9.8k-4   Secure Socket Layer (SSL) binary a
ii  proftpd-doc                   1.3.2a-1.1 Versatile, virtual-hosting FTP dae
pn  proftpd-mod-ldap              <none>     (no description available)
pn  proftpd-mod-mysql             <none>     (no description available)
pn  proftpd-mod-odbc              <none>     (no description available)
pn  proftpd-mod-pgsql             <none>     (no description available)
pn  proftpd-mod-sqlite            <none>     (no description available)

-- debconf information excluded



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to