Your message dated Wed, 26 Mar 2014 18:01:36 +0200
with message-id <[email protected]>
and subject line closing
has caused the Debian Bug report #311339,
regarding harden-servers conflicts vsftpd, which now has ssl support
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact [email protected]
immediately.)
--
311339: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=311339
Debian Bug Tracking System
Contact [email protected] with problems
--- Begin Message ---
Package: harden-servers
Version: 0.1.17
Meta-package harden-servers conflicts package vsftpd. Since version >=2,
vsftpd now supports ssl, so passwords are no more sent in cleartext form.
Package harden-servers doesn't conflict the ftpd-ssl because of this same
reason, so now harden-servers should accept vsftpd as a possible secure ftp
alternative. Furthermore, vsftpd has features which the ftpd-ssl daemon
doesn't support since it's just a netkit ftp: different ways to
enforce/restrict anonymous users, chroot environments, built-in commands
(like "ls"). Thus, harden-servers implies that ftpd-ssl is more secure than
vsftpd, which is currently probably not true.
The fix should be trivial (conflict vsftpd less than version 2), but
unfortunately too late to get into sarge, I guess :( Still, it's nothing a
knowledgeable sysadmin can live without.
Best Regards,
Vassil Dichev
_________________________________________________________________
Express yourself instantly with MSN Messenger! Download today it's FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/
--- End Message ---
--- Begin Message ---
Closing as wontfix. Please create new issue or reopen in case this is still an
issue.
---
Henri Salo
signature.asc
Description: Digital signature
--- End Message ---
