Added a security warning regarding SVDRP to the INSTALL file

This commit is contained in:
Klaus Schmidinger 2000-09-17 21:10:57 +02:00
parent 4f5cd852c2
commit 76e49580ee
2 changed files with 6 additions and 0 deletions

View File

@ -199,3 +199,4 @@ Video Disk Recorder Revision History
slashes, the recording file names have been damaged. Trailing slashes are
now silently removed.
- Fixed a buffer overflow in EIT parsing.
- Added a security warning regarding SVDRP to the INSTALL file.

View File

@ -52,6 +52,11 @@ port ("Simple Video Disk Recorder Protocol"). By default, it listens
on port 2001 (use the --port=PORT option to change this). For details
about the SVDRP syntax see the source file 'svdrp.c'.
WARNING: DUE TO THE OPEN SVDRP PORT THIS PROGRAM MAY CONSTITUTE A
======= POTENTIAL SECURITY HAZARD! IF YOU ARE NOT RUNNING VDR IN
A CONTROLLED ENVIRONMENT, YOU MAY WANT TO DISABLE SVDRP
BY USING '--port=0'!
If the program shall run as a daemon, use the --daemon option. This
will completely detach it from the terminal and will continue as a
background process.