[opensuse] Curious VsFTPd behavior with chroot dependency on server name (DNS config)
Hello I have noticed a really strange behavior of VsFTPd where chroot jail apparently succeeds or fails depending on the domain name type (in the DNS config). The full story: I have a machine running a FTP server using "ftp.example.com", but the same machine also hosts various other things like web services. The ftp-subdomain is an A record in the DNS. For mostly cosmetic reasons I've also created two CNAME records (to ftp), www and test. Thus you can actually FTP to "ftp.example.com", "www.example.com", "test.example.com", or directly to the IP address (of course). Thus, it is the same instance of VsFTPd that answers, no matter (that's correct). I've set up VsFTPd to chroot non-admin users to their home dir, this also works fine... kind of. Here's the curious part; when connecting to "ftp.example.com" (the A record), the user is NOT chrooted and can browse the whole file system. When connecting on any of the other (CNAME) names/IPs that the machine responds to, the same user IS chrooted, exactly the way I would expect. System: OpenSuse 11.3 (and probably at least 11.2), latest updates installed VsFTPd v2.2.2-2.4 uname -a: Linux myserver 2.6.34-12-xen #1 SMP 2010-06-29 02:39:08 +0200 x86_64 x86_64 x86_64 GNU/Linux I'm mystified by this strange behavior, I've seen it before, but this time I decided to take a closer look. Could it be some bug in VsFTPd? Has anyone seen this? BR, Dan -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
El 30/08/10 13:43, Dan Kopparhed escribió:
the user is NOT chrooted and can browse the whole file system. When connecting on any of the other (CNAME) names/IPs that the machine responds to, the same user IS chrooted, exactly the way I would expect.
System: OpenSuse 11.3 (and probably at least 11.2), latest updates installed VsFTPd v2.2.2-2.4 uname -a: Linux myserver 2.6.34-12-xen #1 SMP 2010-06-29 02:39:08 +0200 x86_64 x86_64 x86_64 GNU/Linux
I'm mystified by this strange behavior, I've seen it before, but this time I decided to take a closer look. Could it be some bug in VsFTPd? Has anyone seen this?
This is a bug, open a report at bugzilla attaching as much information as possible, including your configuration files. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org For additional commands, e-mail: opensuse+help@opensuse.org
participants (2)
-
Cristian Rodríguez
-
Dan Kopparhed