You are not logged in.
Hi!
I broke all permissions in arch linux and recovered it using debian rescue mode on my ovh vps.
I also recovered permissions to some other packages and it's working fine.
But i can't fix vsftpd. When i connect to the ftp server, it connects but when it tries to get directories, it returns error:
500 OOPS: priv_sock_get_cmd
and throws that error behind in journalctl.
Nov 18 06:00:45 vps-a425c4d8 kernel: audit: type=1130 audit(1637215245.406:10693): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-coredump@47-28547-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Nov 18 06:00:45 vps-a425c4d8 systemd-coredump[28548]: [?] Process 28545 (vsftpd) of user 1001 dumped core.Found module linux-vdso.so.1 with build-id: 9712ed076859a4223880db174a3db6aede4eb1a9
Found module libffi.so.8 with build-id: f90d8b734f6de9b25faedb8cbfab7054dafc0a42
Found module libp11-kit.so.0 with build-id: f97c44b297b54185bbe3eb6ed6dab5d8967f1532
Found module librt.so.1 with build-id: 75484da2d6f1515189eefa076e0a40328834cd16
Found module libnss_systemd.so.2 with build-id: 57e471d4362ba28b999ade91da668c873a3d8e83
Found module libnss_files.so.2 with build-id: 1a36dfc01d3a1010b2ee79766a24a8090a3266d5
Found module libcrypt.so.2 with build-id: 3743451bdaf36f951f926927633fd964813025d0
Found module libcap-ng.so.0 with build-id: 345acbd3f1a251a101cd25c90bf0b3adb9f5c70e
Found module ld-linux-x86-64.so.2 with build-id: 040cc3dd10461562f177df39e3be2f3704258c3c
Found module libpthread.so.0 with build-id: 07c8f95b4f3251d08550217ad8a1f31066229996
Found module libdl.so.2 with build-id: 5abc547e7b0949f89f3c0e21ab0c8331a7440a8a
Found module libaudit.so.1 with build-id: ba2774b7e0faa91f85f6f2e774e2cad9a9e1d550
Found module libc.so.6 with build-id: 4b406737057708c0e4c642345a703c47a61c73dc
Found module libcrypto.so.1.1 with build-id: 6d23f0a3f354825868d044684fad31d482cc9210
Found module libssl.so.1.1 with build-id: 959cd8f1dd43fc31aeb93caac4eda87c907ef18b
Found module libcap.so.2 with build-id: f028e24efdfb362a37fa8dd280c3894b007f88b1
Found module libpam.so.0 with build-id: bb11b2685fe89555938ffd330ea44d82b0f8701c
Found module vsftpd with build-id: f686c3b0f7f2cc92c11059d9e4bd6e5666468ea8
Stack trace of thread 3:
#0 0x00007fe48a78bd8e fstatat (libc.so.6 + 0xeed8e)
#1 0x00007fe48a76454e opendir_tail (libc.so.6 + 0xc754e)
#2 0x000055832b93cc52 n/a (vsftpd + 0x7c52)
#3 0x000055832b93e9ef n/a (vsftpd + 0x99ef)
#4 0x000055832b9461d2 n/a (vsftpd + 0x111d2)
#5 0x000055832b94664d n/a (vsftpd + 0x1164d)
#6 0x000055832b93a56f n/a (vsftpd + 0x556f)
#7 0x00007fe48a6c4b25 __libc_start_main (libc.so.6 + 0x27b25)
#8 0x000055832b93a80e n/a (vsftpd + 0x580e)
Nov 18 06:00:45 vps-a425c4d8 systemd[1]: systemd-coredump@47-28547-0.service: Deactivated successfully.
Full error:
Nov 18 06:00:45 vps-a425c4d8 audit[28543]: USER_AUTH pid=28543 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_listfile,pam_unix acct="krifix883" exe="/usr/bin/vsftpd" hostname={ip} addr={ip} terminal=ftp res=success'
Nov 18 06:00:45 vps-a425c4d8 audit[28543]: USER_ACCT pid=28543 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="krifix883" exe="/usr/bin/vsftpd" hostname={ip} addr={ip} terminal=ftp res=success'
Nov 18 06:00:45 vps-a425c4d8 audit[28543]: CRED_ACQ pid=28543 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_listfile,pam_unix acct="krifix883" exe="/usr/bin/vsftpd" hostname={ip} addr={ip} terminal=ftp res=success'
Nov 18 06:00:45 vps-a425c4d8 kernel: audit: type=1100 audit(1637215245.243:10685): pid=28543 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:authentication grantors=pam_listfile,pam_unix acct="krifix883" exe="/usr/bin/vsftpd" hostname={ip} addr={ip} terminal=ftp res=success'
Nov 18 06:00:45 vps-a425c4d8 kernel: audit: type=1101 audit(1637215245.243:10686): pid=28543 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:accounting grantors=pam_unix acct="krifix883" exe="/usr/bin/vsftpd" hostname={ip} addr={ip} terminal=ftp res=success'
Nov 18 06:00:45 vps-a425c4d8 kernel: audit: type=1103 audit(1637215245.243:10687): pid=28543 uid=0 auid=4294967295 ses=4294967295 msg='op=PAM:setcred grantors=pam_listfile,pam_unix acct="krifix883" exe="/usr/bin/vsftpd" hostname={ip} addr={ip} terminal=ftp res=success'
Nov 18 06:00:45 vps-a425c4d8 audit[28545]: SECCOMP auid=4294967295 uid=1001 gid=1001 ses=4294967295 pid=28545 comm="vsftpd" exe="/usr/bin/vsftpd" sig=31 arch=c000003e syscall=262 compat=0 ip=0x7fe48a78bd8e code=0x0
Nov 18 06:00:45 vps-a425c4d8 audit[28545]: ANOM_ABEND auid=4294967295 uid=1001 gid=1001 ses=4294967295 pid=28545 comm="vsftpd" exe="/usr/bin/vsftpd" sig=31 res=1
Nov 18 06:00:45 vps-a425c4d8 kernel: audit: type=1326 audit(1637215245.396:10688): auid=4294967295 uid=1001 gid=1001 ses=4294967295 pid=28545 comm="vsftpd" exe="/usr/bin/vsftpd" sig=31 arch=c000003e syscall=262 compat=0 ip=0x7fe48a78bd8e code=0x0
Nov 18 06:00:45 vps-a425c4d8 kernel: audit: type=1701 audit(1637215245.396:10689): auid=4294967295 uid=1001 gid=1001 ses=4294967295 pid=28545 comm="vsftpd" exe="/usr/bin/vsftpd" sig=31 res=1
Nov 18 06:00:45 vps-a425c4d8 audit: BPF prog-id=399 op=LOAD
Nov 18 06:00:45 vps-a425c4d8 audit: BPF prog-id=400 op=LOAD
Nov 18 06:00:45 vps-a425c4d8 audit: BPF prog-id=401 op=LOAD
Nov 18 06:00:45 vps-a425c4d8 systemd[1]: Started Process Core Dump (PID 28547/UID 0).
Nov 18 06:00:45 vps-a425c4d8 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-coredump@47-28547-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Nov 18 06:00:45 vps-a425c4d8 kernel: audit: type=1334 audit(1637215245.406:10690): prog-id=399 op=LOAD
Nov 18 06:00:45 vps-a425c4d8 kernel: audit: type=1334 audit(1637215245.406:10691): prog-id=400 op=LOAD
Nov 18 06:00:45 vps-a425c4d8 kernel: audit: type=1334 audit(1637215245.406:10692): prog-id=401 op=LOAD
Nov 18 06:00:45 vps-a425c4d8 kernel: audit: type=1130 audit(1637215245.406:10693): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-coredump@47-28547-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Nov 18 06:00:45 vps-a425c4d8 systemd-coredump[28548]: [?] Process 28545 (vsftpd) of user 1001 dumped core.Found module linux-vdso.so.1 with build-id: 9712ed076859a4223880db174a3db6aede4eb1a9
Found module libffi.so.8 with build-id: f90d8b734f6de9b25faedb8cbfab7054dafc0a42
Found module libp11-kit.so.0 with build-id: f97c44b297b54185bbe3eb6ed6dab5d8967f1532
Found module librt.so.1 with build-id: 75484da2d6f1515189eefa076e0a40328834cd16
Found module libnss_systemd.so.2 with build-id: 57e471d4362ba28b999ade91da668c873a3d8e83
Found module libnss_files.so.2 with build-id: 1a36dfc01d3a1010b2ee79766a24a8090a3266d5
Found module libcrypt.so.2 with build-id: 3743451bdaf36f951f926927633fd964813025d0
Found module libcap-ng.so.0 with build-id: 345acbd3f1a251a101cd25c90bf0b3adb9f5c70e
Found module ld-linux-x86-64.so.2 with build-id: 040cc3dd10461562f177df39e3be2f3704258c3c
Found module libpthread.so.0 with build-id: 07c8f95b4f3251d08550217ad8a1f31066229996
Found module libdl.so.2 with build-id: 5abc547e7b0949f89f3c0e21ab0c8331a7440a8a
Found module libaudit.so.1 with build-id: ba2774b7e0faa91f85f6f2e774e2cad9a9e1d550
Found module libc.so.6 with build-id: 4b406737057708c0e4c642345a703c47a61c73dc
Found module libcrypto.so.1.1 with build-id: 6d23f0a3f354825868d044684fad31d482cc9210
Found module libssl.so.1.1 with build-id: 959cd8f1dd43fc31aeb93caac4eda87c907ef18b
Found module libcap.so.2 with build-id: f028e24efdfb362a37fa8dd280c3894b007f88b1
Found module libpam.so.0 with build-id: bb11b2685fe89555938ffd330ea44d82b0f8701c
Found module vsftpd with build-id: f686c3b0f7f2cc92c11059d9e4bd6e5666468ea8
Stack trace of thread 3:
#0 0x00007fe48a78bd8e fstatat (libc.so.6 + 0xeed8e)
#1 0x00007fe48a76454e opendir_tail (libc.so.6 + 0xc754e)
#2 0x000055832b93cc52 n/a (vsftpd + 0x7c52)
#3 0x000055832b93e9ef n/a (vsftpd + 0x99ef)
#4 0x000055832b9461d2 n/a (vsftpd + 0x111d2)
#5 0x000055832b94664d n/a (vsftpd + 0x1164d)
#6 0x000055832b93a56f n/a (vsftpd + 0x556f)
#7 0x00007fe48a6c4b25 __libc_start_main (libc.so.6 + 0x27b25)
#8 0x000055832b93a80e n/a (vsftpd + 0x580e)
Nov 18 06:00:45 vps-a425c4d8 systemd[1]: systemd-coredump@47-28547-0.service: Deactivated successfully.
Nov 18 06:00:45 vps-a425c4d8 kernel: audit: type=1131 audit(1637215245.490:10694): pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-coredump@47-28547-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
Nov 18 06:00:45 vps-a425c4d8 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 msg='unit=systemd-coredump@47-28547-0 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
If anybody has an idea I'll be very grateful.
Last edited by Krifix (2021-11-24 12:47:09)
Offline
You might try disabling seccomp sandboxing by adding seccomp_sandbox=NO in /etc/vsftp.cfg. Helped me when I faced the same issue.
Some additional info: https://technologytales.com/2013/09/21/ … in-vsftpd/
Offline