From 97f21ce933af151c0951d79f73233177d9a6f202 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Nikola=20Forr=C3=B3?= Date: Wed, 1 Nov 2017 16:35:56 +0100 Subject: [PATCH 3/4] vsftpd.conf.5: document allow_writeable_chroot option --- vsftpd/man5/vsftpd.conf.5 | 9 +++++++++ 1 file changed, 9 insertions(+) diff --git a/vsftpd/man5/vsftpd.conf.5 b/vsftpd/man5/vsftpd.conf.5 index c7642ce..f50c9c7 100644 --- a/vsftpd/man5/vsftpd.conf.5 +++ b/vsftpd/man5/vsftpd.conf.5 @@ -58,6 +58,15 @@ connections. Default: NO .TP +.B allow_writeable_chroot +Allow chroot()'ing a user to a directory writable by that user. Note that +setting this to YES is potentially dangerous. For example, if the user +creates an 'etc' directory in the new root directory, they could potentially +trick the C library into loading a user-created configuration file from the +/etc/ directory. + +Default: NO +.TP .B anon_mkdir_write_enable If set to YES, anonymous users will be permitted to create new directories under certain conditions. For this to work, the option -- 2.13.6