NAME

tftpd − DARPA Trivial File Transfer Protocol server

SYNOPSIS

/etc/tftpd [ −D [ path ] ] [ −r ] [ −R ] [ −U [ uid ] ]

DESCRIPTION

The tftpd server supports the DARPA Trivial File Transfer Protocol.  The TFTP server operates at the port indicated in the tftp service description; see services(5). The server is normally started by inetd(1M).

The use of tftpd does not require an account or password on the remote system.  Due to the lack of authentication information, tftpd will allow only publicly readable files to be accessed.  Files may be written only if they already exist and are publicly writable.  Note that this extends the concept of “public” to include all users on all hosts that can be reached through the network; this may not be appropriate on all systems, and its implications should be considered before enabling tftp service.  The server should have the user ID with the lowest possible privilege. 

The available options are:

−D [ path ]
Specify directory to chdir so that relative path names may be used.  If path is not specified, the default path name is /usr/spool/uucppublic. 

−r Enable restricted access.  With this option enabled, file paths are restricted to the directory specified in −D or to the default /usr/spool/uucppublic if a directory is not specifed. 

−R Enable relative paths.  Relative paths are relative to the directory specified with −D or /usr/spool/uucppublic if −D is not specified. 

−U [ uid ]
Specify the restricted access UID.  This provides an additional level of security because tftpd is not running as root.  While inetd(1M) could be set up to start tftpd as a non-root user, the chroot(2) call necessary to restrict access can only be run by root.  If uid is not provided, the default is BIN_ID. 

Notes

tftpd is not enabled in the default inetd configuration because of potential security problems. 

SEE ALSO

inetd(1M), tftp(1C), services(5). 

\*U  —  Version 1.0