add settings to disable server STAT and SYST

[drakkan]

Server STAT should be improved from RFC 959

STATUS (STAT)

            This command shall cause a status response to be sent over
            the control connection in the form of a reply.  The command
            may be sent during a file transfer (along with the Telnet IP
            and Synch signals--see the Section on FTP Commands) in which
            case the server will respond with the status of the
            operation in progress, or it may be sent between file
            transfers.  In the latter case, the command may have an
            argument field.  If the argument is a pathname, the command
            is analogous to the "list" command except that data shall be
            transferred over the control connection.  If a partial
            pathname is given, the server may respond with a list of
            file names or attributes associated with that specification.
            If no argument is given, the server should return general
            status information about the server FTP process.  This
            should include current values of all transfer parameters and
            the status of connections.

we can at least disable it for now, thank you

[codecov]

Codecov Report

Merging #204 (49bf434) into master (695e05f) will increase coverage by 0.14%.
The diff coverage is 100.00%.

@@            Coverage Diff             @@
##           master     #204      +/-   ##
==========================================
+ Coverage   73.39%   73.54%   +0.14%     
==========================================
  Files           9        9              
  Lines        1060     1066       +6     
==========================================
+ Hits          778      784       +6     
  Misses        202      202              
  Partials       80       80              

Impacted Files	Coverage Δ
handle_misc.go	95.77% <100.00%> (+0.18%)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update 695e05f...49bf434. Read the comment docs.

[fclairamb]

Why not.

About how to fix that... If we take each possible uses of the command:

1. "During a file transfer": Same as an ABOR, it requires a refactoring of the file handling logic right?
2. "If the argument is a pathname": This is supported
3. "If a partial pathname is given": It is contradicted by RFC3659 on wildcards. And I'm definitely not a fan of adding a wildcarding logic.
4. "If no argument is given": This is correctly handled IMO

So... It looks like the only subject we should really handle is the first one. Am I missing something?

[drakkan]

Why not.

About how to fix that... If we take each possible uses of the command:

1. "During a file transfer": Same as an ABOR, it requires a refactoring of the file handling logic right?
2. "If the argument is a pathname": This is supported
3. "If a partial pathname is given": It is contradicted by RFC3659 on wildcards. And I'm definitely not a fan of adding a wildcarding logic.
4. "If no argument is given": This is correctly handled IMO

So... It looks like the only subject we should really handle is the first one. Am I missing something?

Correct. I don't plan to work on this, in SFTPGo I have a REST API that allows to get connection details.