[Bug 288661] ftp/ proftpd: version 1.3.8c cannot chroot, breaks login

From: <bugzilla-noreply_at_freebsd.org>
Date: Mon, 04 Aug 2025 20:28:59 UTC
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=288661

            Bug ID: 288661
           Summary: ftp/ proftpd: version 1.3.8c cannot chroot, breaks
                    login
           Product: Ports & Packages
           Version: Latest
          Hardware: Any
                OS: Any
            Status: New
          Severity: Affects Some People
          Priority: ---
         Component: Individual Port(s)
          Assignee: ports-bugs@FreeBSD.org
          Reporter: marquis@roble.com

Possibly beginning with the upgrade to 1.3.8c chrooted users are no longer able
to establish ftp sessions (using Filezilla and other clients).  
Debug logs indicate:

  Aug  3 04:05:06 freebsd14 proftpd[32529]: stage2 (...) - user 'user'
authenticated by mod_auth_pam.c
  Aug  3 04:05:06 freebsd14 proftpd[32529]: stage2 (...) - Preparing to chroot
to directory '/var/ftp/user'
  Aug  3 04:05:06 freebsd14 proftpd[32529]: stage2 (...) - chroot to
'/var/ftp/user' failed for user 'user': Operation not permitted
  Aug  3 04:05:06 freebsd14 proftpd[32529]: stage2 (...) - error: unable to set
DefaultRoot directory
  Aug  3 04:05:06 freebsd14 proftpd[32529]: stage2 (...) - FTP session closed.

Removing 'DefaultRoot $chrootdir' from proftpd.conf fixes broken auth but
allows users to cd below $HOME.  Directory and perms are all correct.
Not sure if ftp/proftpd/files/patch-src_fsio.c is relevant but it does note
"FreeBSD with vulnerable chroot".

-- 
You are receiving this mail because:
You are the assignee for the bug.