summaryrefslogtreecommitdiffstats
path: root/libexec/tftpd
diff options
context:
space:
mode:
Diffstat (limited to 'libexec/tftpd')
-rw-r--r--libexec/tftpd/tftpd.86
1 files changed, 5 insertions, 1 deletions
diff --git a/libexec/tftpd/tftpd.8 b/libexec/tftpd/tftpd.8
index 4a9004d..77b447f 100644
--- a/libexec/tftpd/tftpd.8
+++ b/libexec/tftpd/tftpd.8
@@ -68,7 +68,8 @@ Due to the lack of authentication information,
.Nm tftpd
will allow only publicly readable files to be
accessed.
-Files containing the string ``/\|\fB.\|.\fP\|/'' are not allowed.
+Files containing the string ``/\|\fB.\|.\fP\|/'' or starting with
+``\|\fB.\|.\fP\|/'' are not allowed.
Files may be written only if they already exist and are publicly writable.
Note that this extends the concept of
.Dq public
@@ -110,6 +111,9 @@ Causes tftpd to chroot to
.Pa directory
before accepting commands. In addition, the user id is set to
nobody.
+.Pp
+If you are not running -s, no user id change will be
+attempted. You should not run tftpd as root unless you are using -s.
.El
.Sh SEE ALSO
.Xr tftp 1 ,
OpenPOWER on IntegriCloud