Skip to content

Commit e1e3978

Browse files
authored
man: plugin-dir: not world writable (#327)
Small security note not to have a plugin directory in world writable. Indeed, mptcpd is executed with extra permissions, and it will load plugins. Not everybody should then be able to add new plugins. Signed-off-by: Matthieu Baerts (NGI0) <matttbe@kernel.org>
1 parent eecdddd commit e1e3978

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

man/mptcpd.8.in

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -118,7 +118,8 @@ related addresses are updated, e.g.
118118
.TP
119119
.BI \-\-plugin\-dir= DIR
120120
set plugin directory to
121-
.I DIR
121+
.IR DIR ,
122+
which should not be world writable for security reasons.
122123

123124
.TP
124125
.BI \-\-path\-manager= PLUGIN

0 commit comments

Comments
 (0)