forked from mirrors/tftp-hpa-google
More notes on security.
This commit is contained in:
parent
8f396ac2aa
commit
1f9c54ba2f
1 changed files with 4 additions and 1 deletions
|
@ -283,7 +283,10 @@ and rely on firewalling or kernel-based packet filters instead.
|
||||||
The server should be set to run as the user with the lowest possible
|
The server should be set to run as the user with the lowest possible
|
||||||
privilege; please see the
|
privilege; please see the
|
||||||
.B \-u
|
.B \-u
|
||||||
flag.
|
flag. It is probably a good idea to set up a specific user account for
|
||||||
|
.BR tftpd ,
|
||||||
|
rather than letting it run as "nobody", to guard against privilege
|
||||||
|
leaks between applications.
|
||||||
.PP
|
.PP
|
||||||
Access to files can, and should, be restricted by invoking
|
Access to files can, and should, be restricted by invoking
|
||||||
.B tftpd
|
.B tftpd
|
||||||
|
|
Loading…
Add table
Add a link
Reference in a new issue