@@ -1,6 +1,7 @@

[authbind.git] / authbind-helper.8

diff --git a/authbind-helper.8 b/authbind-helper.8
index 55c5e0593ca0155aef7d32e853e523942b375b0d..d45658c7496e3cca3f2004788fb250c7879cc10b 100644 (file)
--- a/authbind-helper.8
+++ b/authbind-helper.8
@@ -49,6 +49,12 @@ leading
 of exactly the right length (8 and 4 digits, respectively), being
 a pairs of hex digits for each byte in the address or port number when
 expressed in network byte order.
+.PP
+.B helper
+will not bind to ports 512 and onwards, because programs like
+.B rshd
+expect these to be used for outgoing connections, so allowing a user
+to bind to one of these would open up security hole(s).
 .SH EXIT STATUS
 .B helper
 will exit with code 0 on success.