[MPlayer-dev-eng] MPHQ FTP CHANGES

Arpi arpi at thot.banki.hu
Wed Mar 17 23:25:36 CET 2004


Hi,

Since the change from proftpd to vsftpd (middle of december 2003),
we had various permissions problems, especially from the http access.
I've patches vsftpd to hell, to fix these and also add some missing
features we had before in proftpd.
Changes:
- now users without a valid shell (like cvssh) can ftp again
Anonymous limitations:
- new dirs can only be created under /MPlayer/incoming/
  nor abote that, nor inside subdirectories of /MPlayer/incoming/
  this should stop those warez distro kiddiez from creating their
  'tagged' dirs inside user-created dirs
- strong file/dirname restrictions for mkdir/uploads:
   name cannot be started with fot or space.
   name canot have more than 3 non-alpha char (like space, dot etc) in line.
   name cannot contain special non-alpha characters, like " ~ | * ? etc
   (some harmless non-alpha allowed, like () [] {} - + % = @ etc)
   name cannot have chars with ascii code <32 or >128 (dont use accents)
- new dirs have permission 0775, so you can access them from http://
- new files are chown to nobody, so you can access them from http://
- old dirs/files are chgrp cvsusers, so you can delete them (if problem 
  is fixed and the file isnt interesting enough to be moved to samples/)
  or can upload *.rep file describing the problem (required -lavdopts bug=
  etc). it may have chmod o+r, so anon ftp users can read them.

please report (in private! not to list, i dont read mplayer lists
for months...) any problems.

also, i've moved bugreport-looking files from incoming to !under_checking
subdir, and warez-looking (no .txt, suspicious filename) files to
!unknown subdir. someone really should check these files, there are
one year old bugreports too, probaly already fixed.


A'rpi / Astral & ESP-team

--
Developer of MPlayer G2, the Movie Framework for all - http://www.MPlayerHQ.hu




More information about the MPlayer-dev-eng mailing list