On Tue, Mar 26, 2019, 2:09 PM xry111--- via blfs-book <
[email protected]> wrote:

> Author: xry111
> Date: Tue Mar 26 11:41:55 2019
> New Revision: 21392
>
> Log:
> Workaround vsftpd seccomp issue on recent kernels
>
> Modified:
>    trunk/BOOK/server/major/vsftpd.xml
>
> Modified: trunk/BOOK/server/major/vsftpd.xml
>
> ==============================================================================
> --- trunk/BOOK/server/major/vsftpd.xml  Tue Mar 26 09:19:13 2019
> (r21391)
> +++ trunk/BOOK/server/major/vsftpd.xml  Tue Mar 26 11:41:55 2019
> (r21392)
> @@ -181,6 +181,18 @@
>  secure_chroot_dir=&vsftpd-empty;</literal>
>  EOF</userinput></screen>
>
> +      <!-- recheck this issue when vsftpd is updated -->
> +      <para>The vsftpd daemon uses seccomp to improve security by default.
> +      But it's known to cause vsftpd unable to handle ftp
> +      <literal>LIST</literal> command with recent kernel versions.  Append
> +      a line to <filename>/etc/vsftpd.conf</filename> (as the
> +      <systemitem class="username">root</systemitem> user) to disable
> +      seccomp and workaround this issue:</para>
> +
> +<screen role="root"><userinput>cat &gt;&gt; /etc/vsftpd.conf &lt;&lt;
> "EOF"
> +<literal>seccomp_sandbox=NO</literal>
> +EOF</userinput></screen>
> +
>        <para>To enable local logins, append the following to the
>        <filename>/etc/vsftpd.conf</filename> file (as the
>        <systemitem class="username">root</systemitem> user):</para>
> --
> http://lists.linuxfromscratch.org/listinfo/blfs-book
> FAQ: http://www.linuxfromscratch.org/blfs/faq.html
> Unsubscribe: See the above information page


Hi Xi,

You might want to put libseccomp as a dependency if it's not there already
and is affected.
-- 
http://lists.linuxfromscratch.org/listinfo/blfs-book
FAQ: http://www.linuxfromscratch.org/blfs/faq.html
Unsubscribe: See the above information page

Reply via email to