%global _generatorsdir %{_prefix}/lib/systemd/system-generators

Name:    vsftpd

Version: 3.0.3

Release: 35%{?dist}

Summary: Very Secure Ftp Daemon

Group:    System Environment/Daemons

# OpenSSL link exception

License:  GPLv2 with exceptions

URL:      https://security.appspot.com/vsftpd.html

Source0:  https://security.appspot.com/downloads/%{name}-%{version}.tar.gz

Source1:  vsftpd.xinetd

Source2:  vsftpd.pam

Source3:  vsftpd.ftpusers

Source4:  vsftpd.user_list

Source6:  vsftpd_conf_migrate.sh

Source7:  vsftpd.service

Source8:  vsftpd@.service

Source9:  vsftpd.target

Source10: vsftpd-generator

BuildRequires: pam-devel

BuildRequires: libcap-devel

BuildRequires: openssl-devel

BuildRequires: systemd

BuildRequires: git

BuildRequires: gcc

Requires: logrotate

Patch1:  0001-Don-t-use-the-provided-script-to-locate-libraries.patch

Patch2:  0002-Enable-build-with-SSL.patch

Patch3:  0003-Enable-build-with-TCP-Wrapper.patch

Patch4:  0004-Use-etc-vsftpd-dir-for-config-files-instead-of-etc.patch

Patch5:  0005-Use-hostname-when-calling-PAM-authentication-module.patch

Patch6:  0006-Close-stdin-out-err-before-listening-for-incoming-co.patch

Patch7:  0007-Make-filename-filters-smarter.patch

Patch8:  0008-Write-denied-logins-into-the-log.patch

Patch9:  0009-Trim-whitespaces-when-reading-configuration.patch

Patch10: 0010-Improve-daemonizing.patch

Patch11: 0011-Fix-listing-with-more-than-one-star.patch

Patch12: 0012-Replace-syscall-__NR_clone-.-with-clone.patch

Patch13: 0013-Extend-man-pages-with-systemd-info.patch

Patch14: 0014-Add-support-for-square-brackets-in-ls.patch

Patch15: 0015-Listen-on-IPv6-by-default.patch

Patch16: 0016-Increase-VSFTP_AS_LIMIT-from-200UL-to-400UL.patch

Patch17: 0017-Fix-an-issue-with-timestamps-during-DST.patch

Patch18: 0018-Change-the-default-log-file-in-configuration.patch

Patch19: 0019-Introduce-reverse_lookup_enable-option.patch

Patch20: 0020-Use-unsigned-int-for-uid-and-gid-representation.patch

Patch21: 0021-Introduce-support-for-DHE-based-cipher-suites.patch

Patch22: 0022-Introduce-support-for-EDDHE-based-cipher-suites.patch

Patch23: 0023-Add-documentation-for-isolate_-options.-Correct-defa.patch

Patch24: 0024-Introduce-new-return-value-450.patch

Patch25: 0025-Improve-local_max_rate-option.patch

Patch26: 0026-Prevent-hanging-in-SIGCHLD-handler.patch

Patch27: 0027-Delete-files-when-upload-fails.patch

Patch28: 0028-Fix-man-page-rendering.patch

Patch29: 0029-Fix-segfault-in-config-file-parser.patch

Patch30: 0030-Fix-logging-into-syslog-when-enabled-in-config.patch

Patch31: 0031-Fix-question-mark-wildcard-withing-a-file-name.patch

Patch32: 0032-Propagate-errors-from-nfs-with-quota-to-client.patch

Patch33: 0033-Introduce-TLSv1.1-and-TLSv1.2-options.patch

Patch34: 0034-Turn-off-seccomp-sandbox-because-it-is-too-strict.patch

Patch35: 0035-Modify-DH-enablement-patch-to-build-with-OpenSSL-1.1.patch

Patch36: 0036-Redefine-VSFTP_COMMAND_FD-to-1.patch

Patch37: 0037-Document-the-relationship-of-text_userdb_names-and-c.patch

Patch38: 0038-Document-allow_writeable_chroot-in-the-man-page.patch

Patch39: 0039-Improve-documentation-of-ASCII-mode-in-the-man-page.patch

Patch40: 0040-Use-system-wide-crypto-policy.patch

Patch41: 0041-Document-the-new-default-for-ssl_ciphers-in-the-man-.patch

Patch42: 0042-When-handling-FEAT-command-check-ssl_tlsv1_1-and-ssl.patch

Patch43: 0043-Enable-only-TLSv1.2-by-default.patch

Patch44: 0044-Disable-anonymous_enable-in-default-config-file.patch

Patch45: 0045-Expand-explanation-of-ascii_-options-behaviour-in-ma.patch

Patch46: 0046-vsftpd.conf-Refer-to-the-man-page-regarding-the-asci.patch

Patch47: 0047-Disable-tcp_wrappers-support.patch

Patch48: 0048-Fix-default-value-of-strict_ssl_read_eof-in-man-page.patch

Patch49: 0049-Add-new-filename-generation-algorithm-for-STOU-comma.patch

Patch50: 0050-Don-t-link-with-libnsl.patch

Patch51: 0051-Improve-documentation-of-better_stou-in-the-man-page.patch

Patch52: 0052-Fix-rDNS-with-IPv6.patch

Patch53: 0053-Always-do-chdir-after-chroot.patch

Patch54: 0054-vsf_sysutil_rcvtimeo-Check-return-value-of-setsockop.patch

Patch55: 0055-vsf_sysutil_get_tz-Check-the-return-value-of-syscall.patch

Patch56: 0056-Log-die-calls-to-syslog.patch

Patch57: 0057-Improve-error-message-when-max-number-of-bind-attemp.patch

Patch58: 0058-Make-the-max-number-of-bind-retries-tunable.patch

Patch59: 0059-Fix-SEGFAULT-when-running-in-a-container-as-PID-1.patch

Patch60: 0001-Move-closing-standard-FDs-after-listen.patch

Patch61: 0002-Prevent-recursion-in-bug.patch

Patch62: 0001-Set-s_uwtmp_inserted-only-after-record-insertion-rem.patch

Patch63: 0002-Repeat-pututxline-if-it-fails-with-EINTR.patch

Patch64: 0003-Repeat-pututxline-until-it-succeeds-if-it-fails-with.patch

Patch65: 0001-Fix-timestamp-handling-in-MDTM.patch

Patch66: 0001-Remove-a-hint-about-the-ftp_home_dir-SELinux-boolean.patch

Patch67: vsftpd-3.0.3-enable_wc_logs-replace_unprintable_with_hex.patch

Patch68: vsftpd-3.0.3-option_to_disable_TLSv1_3.patch

%description

vsftpd is a Very Secure FTP daemon. It was written completely from

scratch.

%prep

%autosetup -S git

cp %{SOURCE1} .

%build

%ifarch s390x sparcv9 sparc64

make CFLAGS="$RPM_OPT_FLAGS -fPIE -pipe -Wextra -Werror" \

%else

make CFLAGS="$RPM_OPT_FLAGS -fpie -pipe -Wextra -Werror" \

%endif

        LINK="-pie -lssl" %{?_smp_mflags}

%install

mkdir -p $RPM_BUILD_ROOT%{_sbindir}

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}

mkdir -p $RPM_BUILD_ROOT%{_sysconfdir}/{vsftpd,pam.d,logrotate.d}

mkdir -p $RPM_BUILD_ROOT%{_mandir}/man{5,8}

mkdir -p $RPM_BUILD_ROOT%{_unitdir}

mkdir -p $RPM_BUILD_ROOT%{_generatorsdir}

install -m 755 vsftpd  $RPM_BUILD_ROOT%{_sbindir}/vsftpd

install -m 600 vsftpd.conf $RPM_BUILD_ROOT%{_sysconfdir}/vsftpd/vsftpd.conf

install -m 644 vsftpd.conf.5 $RPM_BUILD_ROOT/%{_mandir}/man5/

install -m 644 vsftpd.8 $RPM_BUILD_ROOT/%{_mandir}/man8/

install -m 644 RedHat/vsftpd.log $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/vsftpd

install -m 644 %{SOURCE2} $RPM_BUILD_ROOT%{_sysconfdir}/pam.d/vsftpd

install -m 600 %{SOURCE3} $RPM_BUILD_ROOT%{_sysconfdir}/vsftpd/ftpusers

install -m 600 %{SOURCE4} $RPM_BUILD_ROOT%{_sysconfdir}/vsftpd/user_list

install -m 744 %{SOURCE6} $RPM_BUILD_ROOT%{_sysconfdir}/vsftpd/vsftpd_conf_migrate.sh

install -m 644 %{SOURCE7} $RPM_BUILD_ROOT%{_unitdir}

install -m 644 %{SOURCE8} $RPM_BUILD_ROOT%{_unitdir}

install -m 644 %{SOURCE9} $RPM_BUILD_ROOT%{_unitdir}

install -m 755 %{SOURCE10} $RPM_BUILD_ROOT%{_generatorsdir}

mkdir -p $RPM_BUILD_ROOT/%{_var}/ftp/pub

%post

%systemd_post vsftpd.service

%preun

%systemd_preun vsftpd.service

%systemd_preun vsftpd.target

%postun

%systemd_postun_with_restart vsftpd.service 

%files

%{_unitdir}/*

%{_generatorsdir}/*

%{_sbindir}/vsftpd

%dir %{_sysconfdir}/vsftpd

%{_sysconfdir}/vsftpd/vsftpd_conf_migrate.sh

%config(noreplace) %{_sysconfdir}/vsftpd/ftpusers

%config(noreplace) %{_sysconfdir}/vsftpd/user_list

%config(noreplace) %{_sysconfdir}/vsftpd/vsftpd.conf

%config(noreplace) %{_sysconfdir}/pam.d/vsftpd

%config(noreplace) %{_sysconfdir}/logrotate.d/vsftpd

%doc FAQ INSTALL BUGS AUDIT Changelog LICENSE README README.security REWARD

%doc SPEED TODO BENCHMARKS COPYING SECURITY/ EXAMPLE/ TUNING SIZE vsftpd.xinetd

%{_mandir}/man5/vsftpd.conf.*

%{_mandir}/man8/vsftpd.*

%{_var}/ftp

%changelog

* Fri Dec 03 2021 Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-35

- add option to disable TLSv1.3

- Resolves: rhbz#1638375

* Mon Apr 12 2021 Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-34

- Enable support for wide-character strings in logs

- Replace unprintables with HEX code, not question marks

- Resolves: rhbz#1947900

* Mon Nov 02 2020 Artem Egorenkov <aegorenk@redhat.com> - 3.0.3-33

- Unit files fixed "After=network-online.target"

- Resolves: rhbz#1893636

* Tue Mar 17 2020 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-32

- Removed a hint about the ftp_home_dir SELinux boolean from the config file

- Resolves: rhbz#1623424

* Thu Feb 13 2020 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-31

- Fix timestamp handling in MDTM

- Resolves: rhbz#1567855

* Thu Nov 28 2019 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-30

- Fix a problem with bad utmp entries when pututxline() fails

- Resolves: rhbz#1688852

* Thu Nov 28 2019 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-29

- Fix segfault when listen() returns an error

- Resolves: rhbz#1734340

* Wed Jul 25 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-28

- Rebuilt, switched to SHA512 source tarball hash

* Wed Jul 25 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-27

- Fix a segfault when running as PID 1

* Sat Jul 14 2018 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.3-26

- Rebuilt for https://fedoraproject.org/wiki/Fedora_29_Mass_Rebuild

* Tue Jun 19 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-25

- Add config option log_die allowing to pass error messages to syslog

- Add config option bind_retries allowing to change the max number

- of attempts to find a listening port for the PASV/EPSV command

- Resolves: rhbz#1318198

* Fri Jun 01 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-24

- Fix filename expansion in vsftpd_conf_migrate.sh ... again

* Thu May 10 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-23

- Fix issues found by Coverity Scan

* Fri Apr 27 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-22

- Fix filename expansion in vsftpd_conf_migrate.sh

* Thu Apr 05 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-21

- Improve documentation of better_stou in the man page

* Mon Feb 19 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-20

- Add gcc to BuildRequires

* Tue Feb 06 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-19

- Don't link with libnsl

* Tue Feb 06 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-18

- Add a new config option 'better_stou', which can be used to enable

  a better algorithm for generating unique filenames for the STOU command.

- Resolves: rhbz#1479237

* Wed Jan 10 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-17

- Add BuildRequires: libnsl2-devel

- https://fedoraproject.org/wiki/Changes/NISIPv6

* Fri Jan 05 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-16

- Disable tcp_wrappers support

- Resolves: rhbz#1518796

- Fix default value of strict_ssl_read_eof in man page

* Tue Jan 02 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-15

- Expand the explanation of the ascii_* options behaviour

* Tue Jan 02 2018 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-14

- Disable anonymous_enable in default config file

- Resolves: rhbz#1338637

* Thu Dec 21 2017 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-13

- Document the new default for ssl_ciphers in the man page

- Related: rhbz#1483970

- When handling FEAT command, check ssl_tlsv1_1 and ssl_tlsv1_2

- Patch was written by Martin Sehnoutka

- Resolves: rhbz#1432054

- Disable TLSv1 and TLSv1.1 - enable only TLSv1.2 by default

* Thu Dec 21 2017 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-12

- Use system wide crypto policy

- Resolves: rhbz#1483970

* Fri Nov 24 2017 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-11

- Improve documentation of ASCII mode in the man page

- Resolves: rhbz#1139409

* Tue Oct 31 2017 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-10

- Document allow_writeable_chroot in the man page

- Resolves: rhbz#1507143

* Thu Oct 26 2017 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-9

- Document the relationship of text_userdb_names and chroot_local_user

- Resolves: rhbz#1439724

* Tue Sep 05 2017 Ondřej Lysoněk <olysonek@redhat.com> - 3.0.3-8

- Build against OpenSSL 1.1

- Redefine VSFTP_COMMAND_FD to 1 to get errors generated during

- startup picked up by systemd

- Resolves: rhbz#1443055

* Thu Aug 03 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.3-7

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

* Thu Jul 27 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.3-6

- Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

* Sat Feb 11 2017 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.3-5

- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

* Thu Dec 01 2016 Martin Sehnoutka <msehnout@redhat.com> - 3.0.3-4

- Use OpenSSL compat library on rawhide

* Thu Nov 17 2016 Martin Sehnoutka <msehnout@redhat.com> - 3.0.3-3

- Review patches

- Add TLSv1.{1,2} options

- Fix question mark wildcard within a file name

- Seccomp patch removed

* Fri Apr 08 2016 Martin Sehnoutka <msehnout@redhat.com> - 3.0.3-2

- Applied patches:

- Readd seccomp disabled by default

- vsftpd local_max_rate option doesn't work as expected

- The vsftpd hangs in a SIGCHLD handler when the pam_exec.so is used in pam.d 

- configuration

- The vsftpd doesn't remove failed upload when the delete_failed_uploads is 

- enabled and the network cable is unplagged

- man pages bug

- vsftpd segfaults in vsf_sysutil_strndup

- Fix logging when syslog is used

* Thu Mar 17 2016 Martin Sehnoutka <msehnout@redhat.com> - 3.0.3-1

- Update to 3.0.3 version

* Fri Feb 05 2016 Fedora Release Engineering <releng@fedoraproject.org> - 3.0.2-15

- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

* Fri Jun 19 2015 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.0.2-14

- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

* Tue Sep 16 2014 Jiri Skala <jskala@redhat.com> - 3.0.2-13

- added appropriate values to ssl_ciphers (dh and ecdh patches)

* Mon Aug 18 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.0.2-12

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

* Fri Jul 04 2014 Jiri Skala <jskala@redhat.com> - 3.0.2-11

- fixed deny_file, hide_file options - updated sqb patch

* Wed Jun 18 2014 Jiri Skala <jskala@redhat.com> - 3.0.2-10

- improves DH cipher

- implements ECDH cipher

- adds isolate* options to man vsftpd.conf

- corrects max_clients, max_per_ip default values in man vsftd.conf

- adds return code 450 when a file is temporarily unavailable

* Sun Jun 08 2014 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.0.2-9

- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

* Tue May 13 2014 Jiri Skala <jskala@redhat.com> - 3.0.2-8

- adds reverse lookup option to vsftpd.conf

- changes types of uid and gid to uint

- removes spare patch pasv-addr

- implements DH cipher

- gets rid init scirpt subpackage

* Tue Sep 10 2013 Jiri Skala <jskala@redhat.com> - 3.0.2-7

- fixed #1005549 - vsftpd startup broken

* Wed Sep 04 2013 Jiri Skala <jskala@redhat.com> - 3.0.2-6

- fixes usage pasv_address option in combination with external IP

- updated man pages - multile instances using vsftpd.target

* Thu Aug 15 2013 Jiri Skala <jskala@redhat.com> - 3.0.2-5

- replaced systemd path by _unitdir macro

- fixes #7194344 - multiple instances (target, generator)

* Sun Aug 04 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.0.2-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

* Mon Feb 25 2013 Jiri Skala <jskala@redhat.com> - 3.0.2-3

- fixes #913519 - login fails (increased AS_LIMIT)

* Fri Feb 15 2013 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.0.2-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

* Wed Sep 19 2012 Jiri Skala <jskala@redhat.com> - 3.0.2-2

- update to latest upstream 3.0.2

* Mon Sep 17 2012 Jiri Skala <jskala@redhat.com> - 3.0.1-1

- update to latest upstream 3.0.1

- fixes #851441 - Introduce new systemd-rpm macros in vsftpd spec file

- fixes #845980 - vsftpd seccomp filter is too strict

* Sun Jul 22 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 3.0.0-4

- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

* Tue Jul 17 2012 Jiri Skala <jskala@redhat.com> - 3.0.0-3

- changed default value of xferlog_file to /var/log/xferlog

- added rotating xferlog

* Thu Apr 26 2012 Jiri Skala <jskala@redhat.com> - 3.0.0-2

- corrected time zone handling - especially DST flag

- fixed default value of option 'listen'

* Tue Apr 10 2012 Jiri Skala <jskala@redhat.com> - 3.0.0-1

- updated to latest upstream 3.0.0

* Thu Feb 09 2012 Jiri Skala <jskala@redhat.com> - 2.3.5-3

- fixes #788812 - authentication failure on x86_64 when using nss_pgsql

* Sat Jan 14 2012 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.5-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

* Mon Dec 19 2011 Jiri Skala <jskala@redhat.com> - 2.3.5-1

- updated to latest upstream 2.3.5

* Mon Nov 28 2011 Jiri Skala <jskala@redhat.com> - 2.3.4-7

- added patch from BZ#450853#c23

* Tue Nov 15 2011 Jiri Skala <jskala@redhat.com> - 2.3.4-6

- fixes #753365 - multiple issues with vsftpd's systemd unit

- removes exclusivity between listen and listen_ipv6 BZ#450853

- ls wildchars supports square brackets

* Wed Aug 03 2011 Jiri Skala <jskala@redhat.com> - 2.3.4-5

- fixes #719434 - Provide native systemd unit file

- moving SysV initscript into subpackage

* Mon Aug 01 2011 Jiri Skala <jskala@redhat.com> - 2.3.4-4

- rebuild for libcap

* Mon Jul 04 2011 Nils Philippsen <nils@redhat.com> - 2.3.4-3

- update upstream and source URL

* Wed Feb 16 2011 Jiri Skala <jskala@redhat.com> - 2.3.4-2

- fixes #717412 - Connection failures - patched by Takayuki Nagata

* Wed Feb 16 2011 Jiri Skala <jskala@redhat.com> - 2.3.4-1

- updated to latest upstream 2.3.4

* Mon Feb 07 2011 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.3.2-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

* Fri Aug 20 2010 Jiri Skala <jskala@redhat.com> - 2.3.2-1

- fixes #625404 - vsftpd-2.3.1 is available

- joined patches (libs+dso, wildchar+greedy)

* Fri Aug 06 2010 Jiri Skala <jskala@redhat.com> - 2.2.2-8

- fixes #472880 - Configuration can cause confusion because of selinux labels

* Mon May 17 2010 Jiri Skala <jskala@redhat.com> - 2.2.2-7

- when listen_ipv6=YES sets socket option to listen IPv6 only

* Fri May 14 2010 Jiri Skala <jskala@redhat.com> - 2.2.2-6

- syscall(__NR_clone) replaced by clone() to fix incorrect order of params on s390 arch

* Wed Apr 07 2010 Jiri Skala <jskala@redhat.com> - 2.2.2-5

- corrected daemonize_plus patch - don't try kill parent when vsftpd isn't daemonized

* Tue Mar 16 2010 Jiri Skala <jskala@redhat.com> - 2.2.2-4

- fixes #544251 - /etc/rc.d/init.d/vsftpd does not start more than one daemon

* Mon Feb 15 2010 Jiri Skala <jskala@redhat.com> - 2.2.2-3

- fixes #565067 - FTBFS: ImplicitDSOLinking

* Thu Dec 17 2009 Jiri Skala <jskala@redhat.com> - 2.2.2-2

- corrected two patches due to fuzz 0

* Thu Dec 17 2009 Jiri Skala <jskala@redhat.com> - 2.2.2-1

- update to latest upstream

* Mon Nov 23 2009 Jiri Skala <jskala@rehat.com> - 2.2.0-6

- added lost default values of vsftpd.conf (rh patch)

* Wed Sep 16 2009 Tomas Mraz <tmraz@redhat.com> - 2.2.0-5

- use password-auth common PAM configuration instead of system-auth

* Mon Sep 14 2009 Jiri Skala <jskala@rehat.com> - 2.2.0-4

- modified init script to be LSB compliant

* Tue Sep 08 2009 Jiri Skala <jskala@rehat.com> - 2.2.0-3

- fixed bug messaged in RHEL-4 #479774 - Wildcard failures with vsftpd

* Thu Aug 27 2009 Tomas Mraz <tmraz@redhat.com> - 2.2.0-2

- rebuilt with new openssl

* Mon Aug 24 2009 Martin Nagy <mnagy@redhat.com> - 2.2.0-1

- update to latest upstream release 2.2.0

* Tue Aug 04 2009 Martin Nagy <mnagy@redhat.com> - 2.2.0-0.1.pre4

- update to latest upstream release

* Sun Jul 26 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.2-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

* Tue Jun 02 2009 Jiri Skala <jskala@redhat.com> - 2.1.2-1

- updated to latest upstream version

* Thu May 21 2009 Jiri Skala <jskala@redhat.com> - 2.1.1-0.3

- fixed daemonize_plus patch

- fixed test in initscript [ -z "CONFS" ]

* Mon May 04 2009 Jiri Skala <jskala@redhat.com> - 2.1.1-0.2

- fixes daemonize patch

* Wed Apr 22 2009 Jiri Skala <jskala@redhat.com> - 2.1.0-3

- updated to latest upstream version

- improved daemonizing - init script gets correct return code if binding fails

- trim white spaces from option values

- fixed #483604 - vsftpd not honouring delay_failed_login when userlist active

* Wed Feb 25 2009 Fedora Release Engineering <rel-eng@lists.fedoraproject.org> - 2.1.0-2

- Rebuilt for https://fedoraproject.org/wiki/Fedora_11_Mass_Rebuild

* Tue Feb 24 2009 Martin Nagy <mnagy@redhat.com> - 2.1.0-1

- update to latest upstream release

* Fri Jan 23 2009 Martin Nagy <mnagy@redhat.com> - 2.1.0-0.3.pre4

- update to latest upstream release

- enable ptrace sandbox again

- don't mark vsftpd_conf_migrate.sh as a config file

* Fri Jan 16 2009 Martin Nagy <mnagy@redhat.com> - 2.1.0-0.2.pre3

- disable ptrace sandbox to fix build on i386

* Fri Jan 16 2009 Martin Nagy <mnagy@redhat.com> - 2.1.0-0.1.pre3

- update to latest upstream release

- cleanup the spec file

- drop patches fixed upstream:

    vsftpd-1.0.1-missingok.patch

    vsftpd-1.2.1-nonrootconf.patch

    vsftpd-2.0.1-tcp_wrappers.patch

    vsftpd-2.0.2-signal.patch

    vsftpd-2.0.3-daemonize_fds.patch

    vsftpd-2.0.5-correct_comments.patch

    vsftpd-2.0.5-pasv_dot.patch

    vsftpd-2.0.5-write_race.patch

    vsftpd-2.0.5-fix_unique.patch

    vsftpd-2.0.5-uname_size.patch

    vsftpd-2.0.5-bind_denied.patch

    vsftpd-2.0.5-pam_end.patch

    vsftpd-2.0.5-underscore_uname.patch

    vsftpd-2.0.6-listen.patch

- join all configuration patches into one:

    vsftpd-1.1.3-rh.patch

    vsftpd-1.2.1-conffile.patch

    vsftpd-2.0.1-dir.patch

    vsftpd-2.0.1-server_args.patch

    vsftpd-2.0.3-background.patch

    vsftpd-2.0.5-default_ipv6.patch

    vsftpd-2.0.5-add_ipv6_option.patch

    vsftpd-2.0.5-man.patch

* Mon Sep  8 2008 Tom "spot" Callaway <tcallawa@redhat.com> - 2.0.7-1

- fix license tag

- update to 2.0.7

* Fri Jun 20 2008 Dennis Gilmore <dennis@ausil.us> - 2.0.6-5

- add sparc arches to -fPIE list

* Wed May 21 2008 Martin Nagy <mnagy@redhat.com> - 2.0.6-4

- fix a small memory leak (#397011)

* Mon Mar 31 2008 Martin Nagy <mnagy@redhat.com> - 2.0.6-3

- set option listen to default to YES

* Mon Feb 25 2008 Martin Nagy <mnagy@redhat.com> - 2.0.6-2

- fix init script (#431452)

- make the init script LSB compliant (#247093)

* Fri Feb 22 2008 Martin Nagy <mnagy@redhat.com> - 2.0.6-1

- rebase for new upstream version

- remove patches that were fixed in upstream: kickline, confspell, anon_umask

* Mon Feb 11 2008 Martin Nagy <mnagy@redhat.com> - 2.0.5-22

- rebuild for gcc-4.3

* Fri Nov 30 2007 Martin Nagy <mnagy@redhat.com> - 2.0.5-21

- Remove uniq_rename patch.

- Correct create/lock race condition, original patch by <mpoole@redhat.com>

  (#240550).

- Fix bad handling of unique files (#392231).

- Added userlist_log option.

- Allow usernames to begin with underscore or dot (#339911).

- Removed user_config patch.

- Fix nonrootconf patch (#400921).

- Increase maximum length of allowed username (#236326).

- Fix file listing issue with wildcard (#392181).

- Removed use_localtime patch (#243087).

* Thu Nov 08 2007 Martin Nagy <mnagy@redhat.com> - 2.0.5-20

- Correct calling of pam_end (#235843).

* Wed Aug 29 2007 Fedora Release Engineering <rel-eng at fedoraproject dot org> - 2.0.5-19

- Rebuild for selinux ppc32 issue.

* Tue Jul 10 2007 Maros Barabas <mbarabas@redhat.com> - 2.0.5-18

- Add comment for xferlog_std_format

- Resolves #218260

* Fri Jun 29 2007 Maros Barabas <mbarabas@redhat.com> - 2.0.5-17

- Fix pasv dot after pasv response (RFC 959 page 40)

* Wed Apr 04 2007 Maros Barabas <mbarabas@redhat.com> - 2.0.5-16

- Merge review: - fix using %%{_var}, %%{_sbindir} and 

                  %%{_sysconfigdir} macros for files and install

                - fix BuildRoot

                - dropped usermod, openssl & pam requirement

* Tue Mar 20 2007 Florian La Roche <laroche@redhat.com> - 2.0.5-15

- fix BuildPrereq

* Tue Jan 30 2007 Maros Barabas <mbarabas@redhat.com> - 2.0.5-14

- remove file upload permission problem 

- change name of patch vsfptd-2.0.3-user_config

- Resolves #190193

* Fri Jan 19 2007 Maros Barabas <mbarabas@redhat.com> - 2.0.5-13

- add lost patch: don't die when no user config file is present 

- Resolves #166986

* Thu Jan 18 2007 Radek Vokal <rvokal@redhat.com> - 2.0.5-12

- add dist tag

- add buildrequires tcp_wrappers-devel

* Wed Jan 17 2007 Maros Barabas <mbarabas@redhat.com> - 2.0.5-11

- add errno EACCES to not die by vsf_sysutil_bind

- Resolves #198677

* Thu Dec 14 2006 Maros Barabas <mbarabas@redhat.com> - 2.0.5-10

- correct man (5) pages

- Resolves: #216765

- correct calling function stat 

- Resolves: bz200763

* Mon Dec 04 2006 Maros Barabas <mbarabas@redhat.com> - 2.0.5-9

- change BuildRequires tcp_wrappers to tcp_wrappers-devel

* Mon Aug 28 2006 Maros Barabas <mbarabas@redhat.com> - 2.0.5-8

- added forgotten patch to make filename filter (#174764)

* Tue Aug 22 2006 Maros Barabas <mbarabas@redhat.com> - 2.0.5-7

- correct paths of configuration files on man pages

* Tue Aug 15 2006 Maros Barabas <mbarabas@redhat.com> - 2.0.5-6

- correct comments

* Tue Aug 08 2006 Maros Barabas <mbarabas@redhat.com> - 2.0.5-5

- option to change listening to IPv6 protocol

* Tue Aug 01 2006 Maros Barabas <mbarabas@redhat.com> - 2.0.5-4

- listen to IPv4 connections in default conf file

* Mon Jul 17 2006 Radek Vokal <rvokal@redhat.com> - 2.0.5-3

- listen to IPv6 connections in default conf file

* Thu Jul 13 2006 Radek Vokal <rvokal@redhat.com> - 2.0.5-2

- add keyinit instructions to the vsftpd PAM script (#198637)

* Wed Jul 12 2006 Radek Vokal <rvokal@redhat.com> - 2.0.5-1

- upgrade to 2.0.5

- IE should now show the login dialog again (#191147)

* Wed Jul 12 2006 Jesse Keating <jkeating@redhat.com> - 2.0.4-1.2.1

- rebuild

* Fri Feb 10 2006 Jesse Keating <jkeating@redhat.com> - 2.0.4-1.2

- bump again for double-long bug on ppc(64)

* Tue Feb 07 2006 Jesse Keating <jkeating@redhat.com> - 2.0.4-1.1

- rebuilt for new gcc4.1 snapshot and glibc changes

* Thu Jan 12 2006 Radek Vokal <rvokal@redhat.com> 2.0.4-1

- upgrade to 2.0.4

- vsftpd now lock files for simultanous up/downloads (#162511)

* Fri Dec 09 2005 Jesse Keating <jkeating@redhat.com>

- rebuilt

* Wed Nov 09 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-12

- rebuilt against new openssl

- close std file descriptors

* Tue Oct 04 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-11

- use include instead of pam_stack in pam config

* Fri Sep 09 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-10

- vsfptd.log as a default log file has to be rotated (#167359)

- vsftpd does dns reverse before passing hosts to pam_access.so (#159745)

* Wed Aug 31 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-9

- don't die when no user config file is present (#166986)

* Tue Aug 09 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-8

- removed additional cmd line for ftp (#165083)

* Thu Aug 04 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-7

- daemonize with file descriptors (#164998)

* Thu Jun 30 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-6

- start in background as default, init script changed (#158714)

* Mon Jun 27 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-5

- fixed requires for 64bit libs

* Thu Jun 23 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-4

- fixed requires for pam_loginuid

* Wed Jun 01 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-3

- vsftpd update for new audit system (#159223)

* Fri May 27 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-2

- timezone fix, patch from suse.de (#158779)

* Wed Mar 23 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-1

- new release, fixes #106416 and #134541 

* Mon Mar 14 2005 Radek Vokal <rvokal@redhat.com> 2.0.3-pre2

- prerelease, fixes IPv6 issues

* Mon Mar 14 2005 Radek Vokal <rvokal@redhat.com> 2.0.2-1

- update to new release, several bug fixes

* Wed Mar 02 2005 Radek Vokal <rvokal@redhat.com> 2.0.1-10

- rebuilt against gcc4 and new openssl

* Mon Feb 07 2005 Radek Vokal <rvokal@redhat.com> 2.0.1-9

- don't allow to read non-root config files (#145548)

* Mon Jan 10 2005 Radek Vokal <rvokal@redhat.com> 2.0.1-8

- use localtime also in logs (#143687)

* Tue Dec 14 2004 Radek Vokal <rvokal@redhat.com> 2.0.1-7

- fixing directory in vsftpd.pam file (#142805)

* Thu Nov 11 2004 Radek Vokal <rvokal@redhat.com> 2.0.1-6

- vsftpd. files moved to /etc/vsftpd

- added vsftpd_conf_migrate.sh script for moving conf files