src/libexec/ftpd, branch releng/12.2

Fix ftpd privilege escalation via ftpchroot.

2020-09-15T21:47:44+00:00

Approved by:	so
Approved by:	re (implicit for releng/12.2)
Security:	FreeBSD-SA-20:30.ftpd
Security:	CVE-2020-7468

MFC r362569 (by jkim):

2020-07-25T23:06:47+00:00

    Fix build with recent byacc.

Add Makefile.depend.options

2019-12-19T04:58:11+00:00

Leaf directories that have dependencies impacted
by options need a Makefile.depend.options file
to avoid churn in Makefile.depend

DIRDEPS for cases such as OPENSSL, TCP_WRAPPERS etc
can be set in local.dirdeps-options.mk
which can add to those set in Makefile.depend.options

See share/mk/dirdeps-options.mk

Also update affected Makefile.depend files.

MFC of r355616 and r355617

Reviewed by:	 bdrewery
Sponsored by:   Juniper Networks
Differential Revision:  https://reviews.freebsd.org/D22469

Move ftpusers to libexec/ftpd/

2018-08-21T17:07:52+00:00

Thsi helps with pkgbase by switching to CONFS so that ftpusers will be
properly tagged as a config file.

Approved by:	will (mentor)
Differential Revision:	https://reviews.freebsd.org/D16787

Use strlcpy().

2017-12-05T07:21:47+00:00

MFC after:	2 weeks

General further adoption of SPDX licensing ID tags.

2017-11-20T19:49:47+00:00

Mainly focus on files that use BSD 3-Clause license.

The Software Package Data Exchange (SPDX) group provides a specification
to make it easier for automated tools to detect and summarize well known
opensource licenses. We are gradually adopting the specification, noting
that the tags are considered only advisory and do not, in any way,
superceed or replace the license texts.

Special thanks to Wind River for providing access to "The Duke of
Highlander" tool: an older (2014) run over FreeBSD tree was useful as a
starting point.

DIRDEPS_BUILD: Update dependencies.

2017-10-31T00:07:04+00:00

Sponsored by:	Dell EMC Isilon

ftpd(8): fix user context handling.

2017-10-06T13:46:05+00:00

Apply authenticated user context after update of wtmp(5) at start of session,
so that ftpd process is not killed by kernel with SIGXFSZ when user has
"filesize" limit lower than size of system wtmp file. Same applies
to session finalization: revert to super-user context before update of wtmp.

If ftpd hits limit while writing a file at user request,
do not get killed with SIGXFSZ instantly but apparently ignore the signal,
process error and report it to the user, and continue with the session.

PR:		143570
Approved by:	avg (mentor), mav (mentor)
MFC after:	1 week

Improve blacklist support before upgrading libblacklist

2017-05-06T04:17:48+00:00

The locally declared enum of blacklistd actions needs to be
hidden when the soon to be committed changes to libblacklist
are brought into the tree.  Fix the type of the "msg" parameter
to match the library.

There should be no functional changes.

MFC after:	3 days
Sponsored by:	The FreeBSD Foundation

libexec: normalize paths using SRCTOP-relative paths or :H when possible

2017-03-04T11:28:03+00:00

This simplifies make logic/output

MFC after:	1 month
Sponsored by:	Dell EMC Isilon