diff --git a/README.md b/README.md
index 1d962e3..64ec9e6 100644
--- a/README.md
+++ b/README.md
@@ -187,6 +187,7 @@ Teliva also introduces some incompatibilities to protect computer owners:
   - `os.execute`, `os.getenv`, `io.popen`
   - `io.lines` (not a security issue; just difficult to distinguish missing
     files from sandboxing issues)
+  - `lfs.chdir`, `lfs.currentdir`
 * Some functions are disabled because they don't seem to make sense in an
   ncurses environment. This includes the Lua notions of default files, which
   start out as stdin/stdout.
diff --git a/src/lfs.c b/src/lfs.c
index 29c4f55..536bf99 100644
--- a/src/lfs.c
+++ b/src/lfs.c
@@ -1156,8 +1156,8 @@ static void set_info(lua_State * L)
 
 static const struct luaL_Reg fslib[] = {
   { "attributes", file_info },
-  { "chdir", change_dir },
-  { "currentdir", get_dir },
+  /* no 'chdir' without sandboxing it */
+  /* no 'currentdir' without sandboxing it */
   { "dir", dir_iter_factory },
   { "link", make_link },
   { "lock", file_lock },