Comment 3 for bug 1016148

Thank you for taking the time to report this bug and helping to make Ubuntu better.

We cannot change the default behaviour in existing releases. This would regress tested redeployments that depend on the default, so in my opinion this change would be unacceptable.

For the latest development release, there is no issue, since as Doug found, the default does have anonymous login disabled. So I'm marking the task for vsftpd in Ubuntu as Invalid, as there is no issue in the development release, and we cannot SRU a fix.

The only possible fix I see here is for a version of the server guide corresponding to the older release to be amended (effectively an SRU for the server guide) if that is possible, since the default behaviour does seem to have changed between releases.