X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?a=blobdiff_plain;f=authbind-helper.8;h=44291ba4e04277b5d3a914b8ad1d59321f701d9e;hb=6f1ac7c16cc78f7587000bcae3ebfc4aba9925e0;hp=55c5e0593ca0155aef7d32e853e523942b375b0d;hpb=3f781654282c8c85317394dfd874483c4321fac1;p=authbind.git

diff --git a/authbind-helper.8 b/authbind-helper.8
index 55c5e05..44291ba 100644
--- a/authbind-helper.8
+++ b/authbind-helper.8
@@ -48,7 +48,17 @@ leading
 .BR 0x ,
 of exactly the right length (8 and 4 digits, respectively), being
 a pairs of hex digits for each byte in the address or port number when
-expressed in network byte order.
+expressed in host byte order.  For example, the port argument is the
+result of something like
+.B sprintf(arg,
+.B """%04X"",
+.BR sin.sin_port) .
+.PP
+.B helper
+will not bind to ports 512 and onwards, because programs like
+.B rshd
+expect these to be used for outgoing connections, so allowing a user
+to bind to one of these would open up security hole(s).
 .SH EXIT STATUS
 .B helper
 will exit with code 0 on success.