Comment 90 for bug 1160372

Revision history for this message
In , Mvyskocil-l (mvyskocil-l) wrote :

> Can you verify if the above vsftp codepath is indeed being executed and see
> what happens if VSF_SYSDEP_HAVE_LINUX_CLONE is disabled.

With a traditional fork pam session can be opened, however next test - an attempt to download the file dies on a seccomp sanbox. The same apply for a clone w/o NEW_PID, where an audit error is different. I will track this in an another bug to not pollute this one with third issue.

lowering a priority of this issue, patch is in home:mvyskocil:branches:network/vsftpd

https://build.opensuse.org/project/show?project=home%3Amvyskocil%3Abranches%3Anetwork

https://build.opensuse.org/package/view_file?expand=1&file=vsftpd-drop-newpid-from-clone.patch&package=vsftpd&project=home%3Amvyskocil%3Abranches%3Anetwork