Description of problem: Not much of a bug really. A default configuration that might possibly have some negative security consequences. The pure-ftp server configuration file /etc/pure-ftpd.conf contains a setting MinUID which blocks FTP access to low-numbered accounts. In pure-ftpd-1.0.32-2.fc16.i686 which I just installed, the value of this parameter is 500. This should probably be changed to 1000 to agree with current default value in /etc/login.defs. Just in case someone has a lot of system accounts. Thanks. Version-Release number of selected component (if applicable): How reproducible: Steps to Reproduce: 1. 2. 3. Actual results: Expected results: Additional info:
This package has changed ownership in the Fedora Package Database. Reassigning to the new owner of this component.
Hello Tom. My system has the UID_MIN set to 500. That's probably because of updating from older releases of Fedora. I'm unsure with the right approach now. Changing the value to 1000 is probably safer, but it will cause confusions and I'm sure some people will fill bugs against that. Anyway, I like safer world and thus gonna change that to 1000. We'll see how that ends up. Thanks for reporting. Regards, Jaromir.
pure-ftpd-1.0.35-2.fc16 has been submitted as an update for Fedora 16. https://admin.fedoraproject.org/updates/pure-ftpd-1.0.35-2.fc16
pure-ftpd-1.0.35-2.fc17 has been submitted as an update for Fedora 17. https://admin.fedoraproject.org/updates/pure-ftpd-1.0.35-2.fc17
Package pure-ftpd-1.0.35-2.fc16: * should fix your issue, * was pushed to the Fedora 16 testing repository, * should be available at your local mirror within two days. Update it with: # su -c 'yum update --enablerepo=updates-testing pure-ftpd-1.0.35-2.fc16' as soon as you are able to. Please go to the following url: https://admin.fedoraproject.org/updates/FEDORA-2012-3758/pure-ftpd-1.0.35-2.fc16 then log in and leave karma (feedback).
pure-ftpd-1.0.35-2.fc17 has been pushed to the Fedora 17 stable repository. If problems still persist, please make note of it in this bug report.
pure-ftpd-1.0.35-2.fc16 has been pushed to the Fedora 16 stable repository. If problems still persist, please make note of it in this bug report.