VSFTPD causes strange message in /var/log/messages

FeyFre · 12-28-2011, 10:06 AM

Hi

Recently I'm tried to play around vsftpd, and got some unknown for me things to happen.
vsftpd configured to run in standalone mode(listens IPv4 tcp port, not via inetd). Also configured to accept local users logins and chroot into their homes, except for root(can see /).
Anonymous login is disabled.

Now I'm trying to login anonymously(or by non-existent user), expecting to be rejected. So, I'm rejected. But for each retry I got /var/log/messages such entry

Code:

Dec 28 17:47:45 sop-korniychuk kernel: [  112.263033] Failed to create cgroup 2: -1
Dec 28 17:47:51 sop-korniychuk kernel: [  118.333365] Failed to create cgroup 2: -1
Dec 28 17:47:57 sop-korniychuk kernel: [  124.380462] Failed to create cgroup 2: -1
Dec 28 17:48:03 sop-korniychuk kernel: [  130.427848] Failed to create cgroup 2: -1
Dec 28 17:48:09 sop-korniychuk kernel: [  136.474795] Failed to create cgroup 2: -1
Dec 28 17:48:15 sop-korniychuk kernel: [  142.521817] Failed to create cgroup 2: -1
Dec 28 17:48:21 sop-korniychuk kernel: [  148.567964] Failed to create cgroup 2: -1
Dec 28 17:48:27 sop-korniychuk kernel: [  154.619999] Failed to create cgroup 2: -1
Dec 28 17:49:59 sop-korniychuk kernel: [  246.674818] Failed to create cgroup 2: -1

What that means? How and where I can see log about failed login attempts? I don't remember I ever touched cgroups. And lxc not running either. SlackWare 13.37 32bit

Regards

Cedrik · 12-28-2011, 10:42 AM

Weird, I also use vsftpd as standalone and have not this issue, I also disabled anonymous login but I do NOT chroot local users (they are able to go anywhere the system permissions allow)

lithos · 12-28-2011, 10:54 AM

Do you by any chance have SELINUX enabled ?

Code:

# sestatus

more about selinux

good luck

Richard Cranium · 12-28-2011, 05:21 PM

Quote:

Originally Posted by lithos

Do you by any chance have SELINUX enabled ?

Code:

# sestatus

more about selinux

good luck

Slackware forum, Slackware question. Slackware <> Red Hat. Slackware does not have the "sestatus" command.

Christ, this gets old.

FeyFre · 12-29-2011, 10:31 AM

As said, I have no SELinux.
It is pure Slackware 13.37 installation with exceptions: no KDE,KDEI,X,XAP categories + next pacakges: ipset, ss7, pri, DAHDI, Asterisk, fail2ban and htop.

lithos · 12-29-2011, 11:41 AM

My bad, I didn't read properly the post.

Sorry.

Good luck resolving.