grsecurity forums

why does this happen?

--8<--
Apr 14 17:35:45 prometheus kernel: grsec: CAP_CHOWN not raised for (proftpd:7356) UID(0) EUID(0), parent (proftpd:19043) UID(0) EUID(65534)
Apr 14 17:35:45 prometheus proftpd[7356]: prometheus.lan.berghof.org (192.168.0.101[192.168.0.101]) - chown() as root failed: Operation not permitted.
--8<--

I've not enabled any ACLs, the ACL system itself is enabled though.

Hi,

I think u should try to add this to your proc.acl and enable it

/usr/sbin/proftpd {
/ rwx
+CAP_CHOWN
+CAP_NET_BIND_SERVICE
}

i believe the problem is related to the capability restrictions on chroot. Your problem is fixed in 1.9.5.

-Brad