Bug#613003: Major regressions in proftpd-basic: DisplayReadme, DirFakeUser, DirFakeGroup, DirFakeMode, HideUser, HideGroup, HideNoAccess do not work

[Francesco P. Lovergine]

On Tue, Feb 22, 2011 at 06:31:21PM +1100, John Zaitseff wrote:
> As mentioned in previous e-mails, I have been investigating the problems of 
> DisplayReadme, DirFakeUser, DirFakeGroup, DirFakeMode, HideUser, HideGroup 
> and HideNoAccess not working in the ProFTPD package, versions 1.3.3a-6 and 
> 1.3.3d-3.
> 
> The DisplayReadme directive only fails when a top-level Readme file is 
> present: the mod_readme module, in the function add_readme_response(), adds 
> the relevant information ("Please read the file ...") using a call to 
> pr_response_add(R_DUP, ...), but this fails when it is called as a POST_CMD 
> operation for "PASS".  This has been reported upstream as part of bug 2692:
> 
>   http://bugs.proftpd.org/show_bug.cgi?id=2692#c4
> 
> The DirFakeUser, DirFakeGroup and DirFakeMode configuration directives do 
> not work with the MLSD command as they are not implemented in mod_facts.  
> This has been reported upstream as bug 3604:
> 
>   http://bugs.proftpd.org/show_bug.cgi?id=3604
> 
> The HideUser, HideGroup and HideNoAccess directives are fixed in version 
> 1.3.3d-3 by the changes made to src/dirtree.c.
> 
> Yours truly,
> 
> John Zaitseff
> 

John, many thanks for your deep investigation. So, apparently we have
still a few open regressions, which I'm afraid could be fixed only
by a successive backport from testing in squeeze. You know, stable
upgrade policy is quite restrictive in Debian about non critical
or security bugs.

-- 
Francesco P. Lovergine