1b6bc8
--- arpwatch.8.orig	Sun Oct  8 23:31:28 2000
1b6bc8
+++ arpwatch.8	Mon Oct 16 16:46:19 2000
1b6bc8
@@ -36,13 +36,16 @@
1b6bc8
 .I interface
1b6bc8
 ]
1b6bc8
 .br
1b6bc8
-.ti +8
1b6bc8
+.ti +9
1b6bc8
 [
1b6bc8
 .B -n
1b6bc8
 .IR net [/ width
1b6bc8
 ]] [
1b6bc8
 .B -r
1b6bc8
 .I file
1b6bc8
+] [
1b6bc8
+.B -u
1b6bc8
+.I username
1b6bc8
 ]
1b6bc8
 .ad
1b6bc8
 .SH DESCRIPTION
1b6bc8
@@ -94,10 +97,26 @@
1b6bc8
 .B arpwatch
1b6bc8
 does not fork.
1b6bc8
 .LP
1b6bc8
+If 
1b6bc8
+.B -u 
1b6bc8
+flag is used, 
1b6bc8
+.B arpwatch
1b6bc8
+drops root privileges and changes user ID to
1b6bc8
+.I username
1b6bc8
+and group ID to that of the primary group of 
1b6bc8
+.IR username .
1b6bc8
+This is recommended for security reasons.
1b6bc8
+.LP
1b6bc8
 Note that an empty
1b6bc8
 .I arp.dat
1b6bc8
 file must be created before the first time you run
1b6bc8
-.BR arpwatch .
1b6bc8
+.BR arpwatch . 
1b6bc8
+Also, the default directory (where arp.dat is stored) must be owned
1b6bc8
+by 
1b6bc8
+.I username
1b6bc8
+if 
1b6bc8
+.BR -u
1b6bc8
+flag is used.
1b6bc8
 .LP
1b6bc8
 .SH "REPORT MESSAGES"
1b6bc8
 Here's a quick list of the report messages generated by