From b838110933a71a842fd483acea97f89256ded589 Mon Sep 17 00:00:00 2001
From: david <david@e0a8ed71-7df4-0310-8962-fdc924857419>
Date: Fri, 18 May 2012 01:27:15 +0000
Subject: [PATCH] Add more rationale for not installing suid root.

---
 docs/legal-notices.xml | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/docs/legal-notices.xml b/docs/legal-notices.xml
index 7d172bb1b..143d8904e 100644
--- a/docs/legal-notices.xml
+++ b/docs/legal-notices.xml
@@ -126,7 +126,9 @@ system is scanned. Thus, it is often advisable to request permission
 before doing even a light scan of a network.</para>
 
 <para>Nmap should never be installed with special privileges
-(e.g. suid root) for security reasons.<indexterm><primary>setuid, why Nmap shouldn't be</primary></indexterm>
+(e.g. suid root).<indexterm><primary>setuid, why Nmap shouldn't be</primary></indexterm><indexterm><primary>suid</primary><see>setuid</see></indexterm>
+That would open up a major security vulnerability as other users on the
+system (or attackers) could use it for privilege escalation.
 </para>
 </refsect2>