Blob Blame History Raw
From 97f21ce933af151c0951d79f73233177d9a6f202 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Nikola=20Forr=C3=B3?= <nforro@redhat.com>
Date: Wed, 1 Nov 2017 16:35:56 +0100
Subject: [PATCH 3/4] vsftpd.conf.5: document allow_writeable_chroot option

---
 vsftpd/man5/vsftpd.conf.5 | 9 +++++++++
 1 file changed, 9 insertions(+)

diff --git a/vsftpd/man5/vsftpd.conf.5 b/vsftpd/man5/vsftpd.conf.5
index c7642ce..f50c9c7 100644
--- a/vsftpd/man5/vsftpd.conf.5
+++ b/vsftpd/man5/vsftpd.conf.5
@@ -58,6 +58,15 @@ connections.
 
 Default: NO
 .TP
+.B allow_writeable_chroot
+Allow chroot()'ing a user to a directory writable by that user. Note that
+setting this to YES is potentially dangerous. For example, if the user
+creates an 'etc' directory in the new root directory, they could potentially
+trick the C library into loading a user-created configuration file from the
+/etc/ directory.
+
+Default: NO
+.TP
 .B anon_mkdir_write_enable
 If set to YES, anonymous users will be permitted to create new directories
 under certain conditions. For this to work, the option
-- 
2.13.6