Public bug reported:

This bug is reported upstream and Ubuntu needs just a new package from the 
fixed version.
http://bugs.proftpd.org/show_bug.cgi?id=4303


The defaut ACLs of a parent directory are not correctly replicated on created
children. Actually, the mask is not correct.

user:k:rwx                      #effective:r-x

root@kls2:~# dpkg -l|grep proftp
ii  proftpd-basic                              1.3.5a-1ubuntu2
                amd64        Versatile, virtual-hosting FTP daemon - binaries

root@kls2:~# proftpd -v
ProFTPD Version 1.3.5a

root@kls2:/etc/proftpd# grep -ri acl *
modules.conf:ModuleControlsACLs insmod,rmmod allow user root
modules.conf:ModuleControlsACLs lsmod allow user *
modules.conf:LoadModule mod_facl.c

root@kls2:/etc/proftpd# grep modules.conf * -ri
proftpd.conf:Include /etc/proftpd/modules.conf

root@kls2:~# getfacl /home/workgroups/
getfacl: Removing leading '/' from absolute path names
# file: home/workgroups/
# owner: root
# group: root
user::rwx
user:k:rwx
group::r-x
group:vnstat:rwx
mask::rwx
other::r-x
default:user::rwx
default:user:k:rwx
default:group::r-x
default:group:vnstat:rwx
default:mask::rwx
default:other::r-x

root@kls2:~# getfacl /home/workgroups/New/
getfacl: Removing leading '/' from absolute path names
# file: home/workgroups/New/
# owner: k
# group: k
user::rwx
user:k:rwx                      #effective:r-x
group::r-x
group:vnstat:rwx                #effective:r-x
mask::r-x   <= the mask has switched from "rwx" to "r-x" !?
other::r-x
default:user::rwx
default:user:k:rwx
default:group::r-x
default:group:vnstat:rwx
default:mask::rwx
default:other::r-x

** Affects: proftpd (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: acl acls

** Description changed:

+ This bug is reported upstream and Ubuntu needs just a new package from the 
fixed version.
+ http://bugs.proftpd.org/show_bug.cgi?id=4303
+ 
+ 
  The defaut ACLs of a parent directory are not correctly replicated on created
  children. Actually, the mask is not correct.
  
  user:k:rwx                      #effective:r-x
  
- 
  root@kls2:~# dpkg -l|grep proftp
- ii  proftpd-basic                              1.3.5a-1ubuntu2                
 
-                 amd64        Versatile, virtual-hosting FTP daemon - binaries
+ ii  proftpd-basic                              1.3.5a-1ubuntu2
+                 amd64        Versatile, virtual-hosting FTP daemon - binaries
  
  root@kls2:~# proftpd -v
  ProFTPD Version 1.3.5a
  
  root@kls2:/etc/proftpd# grep -ri acl *
  modules.conf:ModuleControlsACLs insmod,rmmod allow user root
  modules.conf:ModuleControlsACLs lsmod allow user *
  modules.conf:LoadModule mod_facl.c
  
  root@kls2:/etc/proftpd# grep modules.conf * -ri
  proftpd.conf:Include /etc/proftpd/modules.conf
  
  root@kls2:~# getfacl /home/workgroups/
  getfacl: Removing leading '/' from absolute path names
  # file: home/workgroups/
  # owner: root
  # group: root
  user::rwx
  user:k:rwx
  group::r-x
  group:vnstat:rwx
  mask::rwx
  other::r-x
  default:user::rwx
  default:user:k:rwx
  default:group::r-x
  default:group:vnstat:rwx
  default:mask::rwx
  default:other::r-x
  
  root@kls2:~# getfacl /home/workgroups/New/
  getfacl: Removing leading '/' from absolute path names
  # file: home/workgroups/New/
  # owner: k
  # group: k
  user::rwx
  user:k:rwx                      #effective:r-x
  group::r-x
  group:vnstat:rwx                #effective:r-x
  mask::r-x   <= the mask has switched from "rwx" to "r-x" !?
  other::r-x
  default:user::rwx
  default:user:k:rwx
  default:group::r-x
  default:group:vnstat:rwx
  default:mask::rwx
  default:other::r-x

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1701199

Title:
  ACLs are not correctly inherited

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/proftpd/+bug/1701199/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to