X-Git-Url: http://www.chiark.greenend.org.uk/ucgi/~ian/git?p=authbind.git;a=blobdiff_plain;f=authbind-helper.8;h=d45658c7496e3cca3f2004788fb250c7879cc10b;hp=55c5e0593ca0155aef7d32e853e523942b375b0d;hb=ced277da933eb4aeb199ee534cfe9a15804061cc;hpb=d152dbf5e88223fa740808da9fbfbf5bb301ecfa

diff --git a/authbind-helper.8 b/authbind-helper.8
index 55c5e05..d45658c 100644
--- a/authbind-helper.8
+++ b/authbind-helper.8
@@ -49,6 +49,12 @@ leading
 of exactly the right length (8 and 4 digits, respectively), being
 a pairs of hex digits for each byte in the address or port number when
 expressed in network byte order.
+.PP
+.B helper
+will not bind to ports 512 and onwards, because programs like
+.B rshd
+expect these to be used for outgoing connections, so allowing a user
+to bind to one of these would open up security hole(s).
 .SH EXIT STATUS
 .B helper
 will exit with code 0 on success.