From 35ec3be5427a54facd5f6299fda2da4c146d4846 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Ond=C5=99ej=20Lyson=C4=9Bk?= Date: Fri, 24 Nov 2017 11:22:43 +0100 Subject: [PATCH 38/59] Document allow_writeable_chroot in the man page --- vsftpd.conf.5 | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/vsftpd.conf.5 b/vsftpd.conf.5 index 45b3f9c..d1f0db5 100644 --- a/vsftpd.conf.5 +++ b/vsftpd.conf.5 @@ -56,6 +56,15 @@ Only applies if is active. If set to YES, anonymous users will be allowed to use secured SSL connections. +Default: NO +.TP +.B allow_writeable_chroot +Allow chroot()'ing a user to a directory writable by that user. Note that +setting this to YES is potentially dangerous. For example, if the user +creates an 'etc' directory in the new root directory, they could potentially +trick the C library into loading a user-created configuration file from the +/etc/ directory. + Default: NO .TP .B anon_mkdir_write_enable -- 2.14.4