Bug#1142348: ITP: proftpd-mod-procfs -- ProFTPD module mod_procfs

Le samedi 18 juillet 2026, 11:11:07 heure d’été d’Europe centrale Hilmar Preusse a écrit :
> Package: wnpp
> Severity: wishlist
> Owner: Hilmar Preuße <[email protected]>
> X-Debbugs-Cc: [email protected]
> 
> * Package name    : proftpd-mod-procfs
>   Version         : 0.1
>   Upstream Contact: TJ Saunders
> * URL             : https://github.com/Castaglia/proftpd-mod_procfs
> * License         : GPL-2+
>   Programming Lang: C
>   Description     : ProFTPD module mod_procfs
> 
> The mod_procfs module for ProFTPD affects the visibility and use of the
> /proc filesystem directory that is commonly available.
> The idea is to mitigate CVE-2026-35025 by limiting access to procfs.
> 
> Upstream refuses to solve CVE-2026-35025 by doing code changes. Instead
> it is suggested to deny access to the /proc file system. This is exactly,
> what is done by that module.

Why does we could not use systemd restriction ?

rouca
> 
> I'm a part of the ProFTP team and I intend to maintain the package in
> the team.
>

-----BEGIN PGP SIGNATURE-----
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=SQs9
-----END PGP SIGNATURE-----