record manpage change in changelog

[authbind.git] / authbind-helper.8

diff --git a/authbind-helper.8 b/authbind-helper.8
index 55c5e0593ca0155aef7d32e853e523942b375b0d..44291ba4e04277b5d3a914b8ad1d59321f701d9e 100644 (file)
--- a/authbind-helper.8
+++ b/authbind-helper.8
@@ -48,7 +48,17 @@ leading
 .BR 0x ,
 of exactly the right length (8 and 4 digits, respectively), being
 a pairs of hex digits for each byte in the address or port number when
-expressed in network byte order.
+expressed in host byte order.  For example, the port argument is the
+result of something like
+.B sprintf(arg,
+.B """%04X"",
+.BR sin.sin_port) .
+.PP
+.B helper
+will not bind to ports 512 and onwards, because programs like
+.B rshd
+expect these to be used for outgoing connections, so allowing a user
+to bind to one of these would open up security hole(s).
 .SH EXIT STATUS
 .B helper
 will exit with code 0 on success.