Control: tags -1 pending On Thu, 03 Aug 2023 08:54:40 -0500 John Goerzen <jgoer...@complete.org> wrote: > Package: vsftpd > Version: 3.0.3-13+b2 > Severity: critical > Justification: breaks unrelated software > > On removing this package, it indiscriminately removes the ftp user. > Unfortunately, that user was required for iksd in package ckermit to work, so > this broke the unrelated ckermit package. > > It is likely that there are other packages and users that would also > use the ftp user. It should not be removed on package removal.
Given this will cause the autoremoval of several of my packages, I've NMU'ed to DELAYED/7 with a fix to stop removing the ftp user/group in the postinst. debdiff attached. -- Kind regards, Luca Boccassi
diff -Nru vsftpd-3.0.3/debian/changelog vsftpd-3.0.3/debian/changelog
--- vsftpd-3.0.3/debian/changelog 2021-03-03 21:05:45.000000000 +0000
+++ vsftpd-3.0.3/debian/changelog 2024-07-07 13:39:11.000000000 +0100
@@ -1,3 +1,10 @@
+vsftpd (3.0.3-13.1) unstable; urgency=medium
+
+ * Non-maintainer upload.
+ * Stop removing ftp user/group on removal (Closes: #1042969)
+
+ -- Luca Boccassi <bl...@debian.org> Sun, 07 Jul 2024 13:39:11 +0100
+
vsftpd (3.0.3-13) unstable; urgency=medium
[Frey Daniel]
diff -Nru vsftpd-3.0.3/debian/vsftpd.postrm vsftpd-3.0.3/debian/vsftpd.postrm
--- vsftpd-3.0.3/debian/vsftpd.postrm 2015-03-03 17:40:36.000000000 +0000
+++ vsftpd-3.0.3/debian/vsftpd.postrm 2024-07-07 13:39:07.000000000 +0100
@@ -23,22 +23,8 @@
case "${1}" in
remove)
- _USERNAME="ftp"
- _GROUPNAME="${_USERNAME}"
_DIRECTORY="/srv/ftp"
- pathfind deluser
- if [ $? = 0 ] ;
- then
- deluser --quiet --system ${_USERNAME}
- fi
-
- pathfind delgroup
- if [ $? = 0 ] ;
- then
- delgroup --quiet --system --only-if-empty ${_GROUPNAME} || true
- fi
-
if [ -d "${_DIRECTORY}" ]
then
rmdir --ignore-fail-on-non-empty "${_DIRECTORY}" || true
signature.asc
Description: This is a digitally signed message part
