Thanks for your report! tftpd actually only performs fs operations as
"nobody", and can only overwrite files if permissions allow it:
[pid 16820] setgroups(1, [65534]) = 0
[pid 16820] chroot(".") = 0
[pid 16820] setregid(65534, 65534) = 0
[pid 16820] setreuid(65534, 65534) = 0
[pid 16820] bind(0, {sa_family=AF_INET, sin_port=htons(0),
sin_addr=inet_addr("127.0.0.1")}, 16) = 0
** Changed in: tftp-hpa (Ubuntu)
Assignee: Martin Pitt => (unassigned)
Status: Unconfirmed => Rejected
** Visibility changed to: Public
--
defaults as root user
https://launchpad.net/bugs/35394
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs