From 97f21ce933af151c0951d79f73233177d9a6f202 Mon Sep 17 00:00:00 2001

From: =?UTF-8?q?Nikola=20Forr=C3=B3?= <nforro@redhat.com>

Date: Wed, 1 Nov 2017 16:35:56 +0100

Subject: [PATCH 3/4] vsftpd.conf.5: document allow_writeable_chroot option

---

 vsftpd/man5/vsftpd.conf.5 | 9 +++++++++

 1 file changed, 9 insertions(+)

diff --git a/vsftpd/man5/vsftpd.conf.5 b/vsftpd/man5/vsftpd.conf.5

index c7642ce..f50c9c7 100644

--- a/vsftpd/man5/vsftpd.conf.5

+++ b/vsftpd/man5/vsftpd.conf.5

@@ -58,6 +58,15 @@ connections.

 Default: NO

 .TP

+.B allow_writeable_chroot

+Allow chroot()'ing a user to a directory writable by that user. Note that

+setting this to YES is potentially dangerous. For example, if the user

+creates an 'etc' directory in the new root directory, they could potentially

+trick the C library into loading a user-created configuration file from the

+/etc/ directory.

+

+Default: NO

+.TP

 .B anon_mkdir_write_enable

 If set to YES, anonymous users will be permitted to create new directories

 under certain conditions. For this to work, the option

-- 

2.13.6