| Age | Commit message (Collapse) | Author | Files | Lines |
|---|
|
* Don't split large commands into multiple commands; just fail on them.
This prevents cross-site request forgery (CSRF)-like attacks,
when a web browser is used to access an ftp server.
* Enhance -C to support an optional @host ('-C user[@host]'):
checks whether user as connecting from host would be granted
access by ftpusers(5).
* Support IPv6 in the host directive of ftpusers(5).
* Implement -n to disable hostname lookups.
* Disable SOCKS support; I don't have the ability to test it,
and the autoconf checks were very out of date.
* Add configure --with-pam to enable PAM authentication support.
Defaults to checking for PAM.
* Add configure --with-skey to enable S/Key authentication support.
Incompatible with --with-pam, defaults to no.
* Fix pathnames in the installed manual pages to contain
the appropriate $(prefix) substitution.
* Use fcntl(3) locking instead of flock(3) or lockf(3).
* Various other portability improvements.
|
|
|
|
requested by <martin>
Changes:
20061217:
=========
- Portability fix: provide a replacement daemon(3) if necessary.
20061204:
=========
- Fix buffer overflow in local version of glob(3). (already fixed in pkgsrc)
- Implement -D to run as a stand-alone daemon.
- Add ftpd.conf(5) options:
hidesymlinks
recvbufsize
- Enforce account expiration, and support shadow password aging where
appropriate.
- Return 450 instead of 550 upon NLST error.
- Portability fixes and improvements.
|
|
http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051009.html
Bumb to nb1
|
|
* remove use of setjmp/longjmp
* improve safety of signal handlers
* fix minor memory leaks
* improve portability to BSD/OS 3.0
|
|
(will be included in the next release) and make the package honour
PKG_SYSCONFDIR.
use CONF_FILES to install the sample configuration ftpd.conf and
ftpusers.
bump PKGREVISION, as the default configuration file location has
changed to ${PKG_SYSCONFDIR}. set PKG_SYSCONFDIR.tnftpd=/etc to get
the previous behaviour.
|
