User's Manual

22 Chapter 3. Configuration
3.9.1. TUX FTP Server Security Features
The following are security features of the TUX FTP Server:
• Because TUX does not start per-client processes, the memory allocation overhead for each
FTP client logged in is less than 10 KB. This allows thousands of parallel connections.
• Paranoid parser and paranoid command-evaluation.
• Chroots to docroot.
• Never starts any external userspace process. All FTP functionality is done in a approxi-
mately 900 lines C module, in the kernel.
• Even in kernel mode the TUX FTP Server drops all priviledges and switches to uid and
group nobody.
• Only the most trivial globbing (mget *) supported, and no recursion support.