More notes on security.

This commit is contained in:
hpa 2001-11-19 21:25:51 +00:00
parent 8f396ac2aa
commit 1f9c54ba2f

View file

@ -283,7 +283,10 @@ and rely on firewalling or kernel-based packet filters instead.
The server should be set to run as the user with the lowest possible The server should be set to run as the user with the lowest possible
privilege; please see the privilege; please see the
.B \-u .B \-u
flag. flag. It is probably a good idea to set up a specific user account for
.BR tftpd ,
rather than letting it run as "nobody", to guard against privilege
leaks between applications.
.PP .PP
Access to files can, and should, be restricted by invoking Access to files can, and should, be restricted by invoking
.B tftpd .B tftpd