diff options
Diffstat (limited to 'source/n/vsftpd/vsftpd.conf.diff')
| -rw-r--r-- | source/n/vsftpd/vsftpd.conf.diff | 18 |
1 files changed, 14 insertions, 4 deletions
diff --git a/source/n/vsftpd/vsftpd.conf.diff b/source/n/vsftpd/vsftpd.conf.diff index 1f410a7ac..ac3c6ab24 100644 --- a/source/n/vsftpd/vsftpd.conf.diff +++ b/source/n/vsftpd/vsftpd.conf.diff @@ -1,6 +1,5 @@ -diff -Nur vsftpd-2.2.1.orig/vsftpd.conf vsftpd-2.2.1/vsftpd.conf ---- vsftpd-2.2.1.orig/vsftpd.conf 2009-10-18 21:04:23.000000000 -0500 -+++ vsftpd-2.2.1/vsftpd.conf 2009-10-19 10:22:16.609407947 -0500 +--- ./vsftpd.conf.orig 2011-12-17 12:24:40.000000000 -0600 ++++ ./vsftpd.conf 2016-04-11 18:34:26.772862375 -0500 @@ -19,7 +19,7 @@ # # Default umask for local users is 077. You may wish to change this to 022, @@ -24,7 +23,7 @@ diff -Nur vsftpd-2.2.1.orig/vsftpd.conf vsftpd-2.2.1/vsftpd.conf # # You may change the default value for timing out an idle session. #idle_session_timeout=600 -@@ -101,12 +101,13 @@ +@@ -104,14 +104,24 @@ # default to avoid remote users being able to cause excessive I/O on large # sites. However, some broken FTP clients such as "ncftp" and "mirror" assume # the presence of the "-R" option, so there is a strong case for enabling it. @@ -43,3 +42,14 @@ diff -Nur vsftpd-2.2.1.orig/vsftpd.conf vsftpd-2.2.1/vsftpd.conf # # This directive enables listening on IPv6 sockets. To listen on IPv4 and IPv6 # sockets, you must run two copies of vsftpd with two configuration files. + # Make sure, that one of the listen options is commented !! + #listen_ipv6=YES ++# ++# The seccomp sandbox feature adds an additional layer of security, but has ++# been known to cause various problems depending on the kernel version. ++# Problems may include kernel audit warnings in the system logs, or even ++# failure to get a directory listing (or do much of anything in directories ++# with enough files to trigger the issue). ++# If you see errors like "OOPS: priv_sock_get_cmd" make sure this option is ++# set to NO. We'll set it to NO by default since we want a reliable ftpd. ++seccomp_sandbox=NO |