summaryrefslogtreecommitdiff
path: root/network/arpwatch/patches/arpwatch-drop-man.patch
blob: f183b2164ed583c7ea0d7fdd68e7ff83f6d89a78 (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
--- arpwatch.8.orig	Sun Oct  8 23:31:28 2000
+++ arpwatch.8	Mon Oct 16 16:46:19 2000
@@ -36,13 +36,16 @@
 .I interface
 ]
 .br
-.ti +8
+.ti +9
 [
 .B -n
 .IR net [/ width
 ]] [
 .B -r
 .I file
+] [
+.B -u
+.I username
 ]
 .ad
 .SH DESCRIPTION
@@ -94,10 +97,26 @@
 .B arpwatch
 does not fork.
 .LP
+If 
+.B -u 
+flag is used, 
+.B arpwatch
+drops root privileges and changes user ID to
+.I username
+and group ID to that of the primary group of 
+.IR username .
+This is recommended for security reasons.
+.LP
 Note that an empty
 .I arp.dat
 file must be created before the first time you run
-.BR arpwatch .
+.BR arpwatch . 
+Also, the default directory (where arp.dat is stored) must be owned
+by 
+.I username
+if 
+.BR -u
+flag is used.
 .LP
 .SH "REPORT MESSAGES"
 Here's a quick list of the report messages generated by