release/src/router/vsftpd/tunables.c

   1 /*
   2  * Part of Very Secure FTPd
   3  * Licence: GPL v2
   4  * Author: Chris Evans
   5  * tunables.c
   6  */
   7
   8 #include "tunables.h"
   9 #include "sysutil.h"
  10
  11 int tunable_anonymous_enable;
  12 int tunable_local_enable;
  13 int tunable_pasv_enable;
  14 int tunable_port_enable;
  15 int tunable_chroot_local_user;
  16 int tunable_write_enable;
  17 int tunable_anon_upload_enable;
  18 int tunable_anon_mkdir_write_enable;
  19 int tunable_anon_other_write_enable;
  20 int tunable_anon_allow_writable_root;
  21 int tunable_chown_uploads;
  22 int tunable_connect_from_port_20;
  23 int tunable_xferlog_enable;
  24 int tunable_dirmessage_enable;
  25 int tunable_anon_world_readable_only;
  26 int tunable_async_abor_enable;
  27 int tunable_ascii_upload_enable;
  28 int tunable_ascii_download_enable;
  29 int tunable_one_process_model;
  30 int tunable_xferlog_std_format;
  31 int tunable_pasv_promiscuous;
  32 int tunable_deny_email_enable;
  33 int tunable_chroot_list_enable;
  34 int tunable_setproctitle_enable;
  35 int tunable_text_userdb_names;
  36 int tunable_ls_recurse_enable;
  37 int tunable_log_ftp_protocol;
  38 int tunable_guest_enable;
  39 int tunable_userlist_enable;
  40 int tunable_userlist_deny;
  41 int tunable_use_localtime;
  42 int tunable_check_shell;
  43 int tunable_hide_ids;
  44 int tunable_listen;
  45 int tunable_port_promiscuous;
  46 int tunable_passwd_chroot_enable;
  47 int tunable_no_anon_password;
  48 int tunable_tcp_wrappers;
  49 int tunable_use_sendfile;
  50 int tunable_force_dot_files;
  51 int tunable_listen_ipv6;
  52 int tunable_dual_log_enable;
  53 int tunable_syslog_enable;
  54 int tunable_background;
  55 int tunable_virtual_use_local_privs;
  56 int tunable_session_support;
  57 int tunable_download_enable;
  58 int tunable_dirlist_enable;
  59 int tunable_chmod_enable;
  60 int tunable_secure_email_list_enable;
  61 int tunable_run_as_launching_user;
  62 int tunable_no_log_lock;
  63 int tunable_ssl_enable;
  64 int tunable_allow_anon_ssl;
  65 int tunable_force_local_logins_ssl;
  66 int tunable_force_local_data_ssl;
  67 int tunable_sslv2;
  68 int tunable_sslv3;
  69 int tunable_tlsv1;
  70 int tunable_tilde_user_enable;
  71 int tunable_force_anon_logins_ssl;
  72 int tunable_force_anon_data_ssl;
  73 int tunable_mdtm_write;
  74 int tunable_lock_upload_files;
  75 int tunable_pasv_addr_resolve;
  76 int tunable_utf8;
  77 int tunable_debug_ssl;
  78 int tunable_require_cert;
  79 int tunable_validate_cert;
  80 int tunable_strict_ssl_read_eof;
  81 int tunable_strict_ssl_write_shutdown;
  82 int tunable_ssl_request_cert;
  83 int tunable_delete_failed_uploads;
  84 int tunable_implicit_ssl;
  85 int tunable_sandbox;
  86 int tunable_require_ssl_reuse;
  87 int tunable_isolate;
  88 int tunable_isolate_network;
  89 int tunable_ftp_enable;
  90 int tunable_http_enable;
  91
  92 unsigned int tunable_accept_timeout;
  93 unsigned int tunable_connect_timeout;
  94 unsigned int tunable_local_umask;
  95 unsigned int tunable_anon_umask;
  96 unsigned int tunable_ftp_data_port;
  97 unsigned int tunable_idle_session_timeout;
  98 unsigned int tunable_data_connection_timeout;
  99 unsigned int tunable_pasv_min_port;
 100 unsigned int tunable_pasv_max_port;
 101 unsigned int tunable_anon_max_rate;
 102 unsigned int tunable_local_max_rate;
 103 unsigned int tunable_listen_port;
 104 unsigned int tunable_max_clients;
 105 unsigned int tunable_file_open_mode;
 106 unsigned int tunable_max_per_ip;
 107 unsigned int tunable_trans_chunk_size;
 108 unsigned int tunable_delay_failed_login;
 109 unsigned int tunable_delay_successful_login;
 110 unsigned int tunable_max_login_fails;
 111 unsigned int tunable_chown_upload_mode;
 112
 113 const char* tunable_secure_chroot_dir;
 114 const char* tunable_ftp_username;
 115 const char* tunable_chown_username;
 116 const char* tunable_xferlog_file;
 117 const char* tunable_vsftpd_log_file;
 118 const char* tunable_message_file;
 119 const char* tunable_nopriv_user;
 120 const char* tunable_ftpd_banner;
 121 const char* tunable_banned_email_file;
 122 const char* tunable_chroot_list_file;
 123 const char* tunable_pam_service_name;
 124 const char* tunable_guest_username;
 125 const char* tunable_userlist_file;
 126 const char* tunable_anon_root;
 127 const char* tunable_local_root;
 128 const char* tunable_banner_file;
 129 const char* tunable_pasv_address;
 130 const char* tunable_listen_address;
 131 const char* tunable_user_config_dir;
 132 const char* tunable_listen_address6;
 133 const char* tunable_cmds_allowed;
 134 const char* tunable_cmds_denied;
 135 const char* tunable_hide_file;
 136 const char* tunable_deny_file;
 137 const char* tunable_user_sub_token;
 138 const char* tunable_email_password_file;
 139 const char* tunable_rsa_cert_file;
 140 const char* tunable_dsa_cert_file;
 141 const char* tunable_ssl_ciphers;
 142 const char* tunable_rsa_private_key_file;
 143 const char* tunable_dsa_private_key_file;
 144 const char* tunable_ca_certs_file;
 145 const char* tunable_passwd_file;
 146
 147 static void install_str_setting(const char* p_value, const char** p_storage);
 148
 149 void
 150 tunables_load_defaults()
 151 {
 152   tunable_anonymous_enable = 1;
 153   tunable_local_enable = 0;
 154   tunable_pasv_enable = 1;
 155   tunable_port_enable = 1;
 156   tunable_chroot_local_user = 0;
 157   tunable_write_enable = 0;
 158   tunable_anon_upload_enable = 0;
 159   tunable_anon_mkdir_write_enable = 0;
 160   tunable_anon_other_write_enable = 0;
 161   tunable_anon_allow_writable_root = 0;
 162   tunable_chown_uploads = 0;
 163   tunable_connect_from_port_20 = 0;
 164   tunable_xferlog_enable = 0;
 165   tunable_dirmessage_enable = 0;
 166   tunable_anon_world_readable_only = 1;
 167   tunable_async_abor_enable = 0;
 168   tunable_ascii_upload_enable = 0;
 169   tunable_ascii_download_enable = 0;
 170   tunable_one_process_model = 0;
 171   tunable_xferlog_std_format = 0;
 172   tunable_pasv_promiscuous = 0;
 173   tunable_deny_email_enable = 0;
 174   tunable_chroot_list_enable = 0;
 175   tunable_setproctitle_enable = 0;
 176   tunable_text_userdb_names = 0;
 177   tunable_ls_recurse_enable = 0;
 178   tunable_log_ftp_protocol = 0;
 179   tunable_guest_enable = 0;
 180   tunable_userlist_enable = 0;
 181   tunable_userlist_deny = 1;
 182   tunable_use_localtime = 0;
 183   tunable_check_shell = 1;
 184   tunable_hide_ids = 0;
 185   tunable_listen = 0;
 186   tunable_port_promiscuous = 0;
 187   tunable_passwd_chroot_enable = 0;
 188   tunable_no_anon_password = 0;
 189   tunable_tcp_wrappers = 0;
 190   tunable_use_sendfile = 1;
 191   tunable_force_dot_files = 0;
 192   tunable_listen_ipv6 = 0;
 193   tunable_dual_log_enable = 0;
 194   tunable_syslog_enable = 0;
 195   tunable_background = 0;
 196   tunable_virtual_use_local_privs = 0;
 197   tunable_session_support = 0;
 198   tunable_download_enable = 1;
 199   tunable_dirlist_enable = 1;
 200   tunable_chmod_enable = 1;
 201   tunable_secure_email_list_enable = 0;
 202   tunable_run_as_launching_user = 0;
 203   tunable_no_log_lock = 0;
 204   tunable_ssl_enable = 0;
 205   tunable_allow_anon_ssl = 0;
 206   tunable_force_local_logins_ssl = 1;
 207   tunable_force_local_data_ssl = 1;
 208   tunable_sslv2 = 0;
 209   tunable_sslv3 = 0;
 210   tunable_tlsv1 = 1;
 211   tunable_tilde_user_enable = 0;
 212   tunable_force_anon_logins_ssl = 0;
 213   tunable_force_anon_data_ssl = 0;
 214   tunable_mdtm_write = 1;
 215   tunable_lock_upload_files = 1;
 216   tunable_pasv_addr_resolve = 0;
 217   tunable_utf8 = 0;
 218   tunable_debug_ssl = 0;
 219   tunable_require_cert = 0;
 220   tunable_validate_cert = 0;
 221   tunable_strict_ssl_read_eof = 0;
 222   tunable_strict_ssl_write_shutdown = 0;
 223   tunable_ssl_request_cert = 1;
 224   tunable_delete_failed_uploads = 0;
 225   tunable_implicit_ssl = 0;
 226   tunable_sandbox = 0;
 227   tunable_require_ssl_reuse = 1;
 228   tunable_isolate = 1;
 229   tunable_isolate_network = 1;
 230   tunable_ftp_enable = 1;
 231   tunable_http_enable = 0;
 232
 233   tunable_accept_timeout = 60;
 234   tunable_connect_timeout = 60;
 235   tunable_local_umask = 077;
 236   tunable_anon_umask = 077;
 237   tunable_ftp_data_port = 20;
 238   tunable_idle_session_timeout = 300;
 239   tunable_data_connection_timeout = 300;
 240   /* IPPORT_USERRESERVED + 1 */
 241   tunable_pasv_min_port = 5001;
 242   tunable_pasv_max_port = 0;
 243   tunable_anon_max_rate = 0;
 244   tunable_local_max_rate = 0;
 245   /* IPPORT_FTP */
 246   tunable_listen_port = 21;
 247   tunable_max_clients = 2000;
 248   /* -rw-rw-rw- */
 249   tunable_file_open_mode = 0666;
 250   tunable_max_per_ip = 50;
 251   tunable_trans_chunk_size = 0;
 252   tunable_delay_failed_login = 1;
 253   tunable_delay_successful_login = 0;
 254   tunable_max_login_fails = 3;
 255   /* -rw------- */
 256   tunable_chown_upload_mode = 0600;
 257
 258   install_str_setting("/var/run/vsftpd", &tunable_secure_chroot_dir);
 259   install_str_setting("ftp", &tunable_ftp_username);
 260   install_str_setting("root", &tunable_chown_username);
 261   install_str_setting("/var/log/xferlog", &tunable_xferlog_file);
 262   install_str_setting("/var/log/vsftpd.log", &tunable_vsftpd_log_file);
 263   install_str_setting(".message", &tunable_message_file);
 264   install_str_setting("nobody", &tunable_nopriv_user);
 265   install_str_setting(0, &tunable_ftpd_banner);
 266   install_str_setting("/etc/vsftpd.banned_emails", &tunable_banned_email_file);
 267   install_str_setting("/etc/vsftpd.chroot_list", &tunable_chroot_list_file);
 268   install_str_setting("ftp", &tunable_pam_service_name);
 269   install_str_setting("ftp", &tunable_guest_username);
 270   install_str_setting("/etc/vsftpd.user_list", &tunable_userlist_file);
 271   install_str_setting(0, &tunable_anon_root);
 272   install_str_setting(0, &tunable_local_root);
 273   install_str_setting(0, &tunable_banner_file);
 274   install_str_setting(0, &tunable_pasv_address);
 275   install_str_setting(0, &tunable_listen_address);
 276   install_str_setting(0, &tunable_user_config_dir);
 277   install_str_setting(0, &tunable_listen_address6);
 278   install_str_setting(0, &tunable_cmds_allowed);
 279   install_str_setting(0, &tunable_cmds_denied);
 280   install_str_setting(0, &tunable_hide_file);
 281   install_str_setting(0, &tunable_deny_file);
 282   install_str_setting(0, &tunable_user_sub_token);
 283   install_str_setting("/etc/vsftpd.email_passwords",
 284                       &tunable_email_password_file);
 285   install_str_setting("/var/run/vsftpd/vsftpd.pem",
 286                       &tunable_rsa_cert_file);
 287   install_str_setting(0, &tunable_dsa_cert_file);
 288   install_str_setting("DES-CBC3-SHA", &tunable_ssl_ciphers);
 289   install_str_setting(0, &tunable_rsa_private_key_file);
 290   install_str_setting(0, &tunable_dsa_private_key_file);
 291   install_str_setting(0, &tunable_ca_certs_file);
 292   install_str_setting(0, &tunable_passwd_file);
 293 }
 294
 295 void
 296 install_str_setting(const char* p_value, const char** p_storage)
 297 {
 298   char* p_curr_val = (char*) *p_storage;
 299   if (p_curr_val != 0)
 300   {
 301     vsf_sysutil_free(p_curr_val);
 302   }
 303   if (p_value != 0)
 304   {
 305     p_value = vsf_sysutil_strdup(p_value);
 306   }
 307   *p_storage = p_value;
 308 }