设计如此,看下面文档:
The use of tftp(1) does not require an account or password on the remote
system. Due to the lack of authentication information, tftpd will allow
only publicly readable files to be accessed. Files containing the string
``/../'' or starting with ``../'' are not allowed. Files may be written
only if they already exist and are publicly writable.