Clarify the actions of -s and the list of allowable names.

1 files changed, 5 insertions, 1 deletions

diff --git a/libexec/tftpd/tftpd.8 b/libexec/tftpd/tftpd.8
index 4a9004d..77b447f 100644
--- a/libexec/tftpd/tftpd.8
+++ b/libexec/tftpd/tftpd.8
@@ -68,7 +68,8 @@ Due to the lack of authentication information,
 .Nm tftpd
 will allow only publicly readable files to be
 accessed.
-Files containing the string ``/\|\fB.\|.\fP\|/'' are not allowed.
+Files containing the string ``/\|\fB.\|.\fP\|/'' or starting with
+``\|\fB.\|.\fP\|/'' are not allowed.
 Files may be written only if they already exist and are publicly writable.
 Note that this extends the concept of
 .Dq public
@@ -110,6 +111,9 @@ Causes tftpd to chroot to
 .Pa directory
 before accepting commands.  In addition, the user id is set to
 nobody.
+.Pp
+If you are not running -s, no user id change will be
+attempted.  You should not run tftpd as root unless you are using -s.
 .El
 .Sh SEE ALSO
 .Xr tftp 1 ,