diff --git a/src/XrdFfs/README b/src/XrdFfs/README
index cf1c9e49e49..903065c13a8 100644
--- a/src/XrdFfs/README
+++ b/src/XrdFfs/README
@@ -49,6 +49,7 @@ XROOTDFS_OFSFWD: if the xrootd cluster uses ofs.forward (or ofs.forward 3way)
     and expect the operations to be forwarded to the data nodes by the 
     redirector. Otherwise one can define XROOTDFS_OFSFWD to '0'. XrootdFS will 
     then go to individual data node for mv/rm/rmdir/trunc.
+XROOTDFS_NO_ALLOW_OTHER: do not pass option allow_other to fuse.
 
 Please refer to the "Introduction to the XrootdFS" document in the above web
 page for more general idea of XrootdFS.
@@ -105,6 +106,9 @@ attr_timeout=10
 entry_timeout=10
 negative_timeout=5
 
+Note that allow_other cannot be unset by command line. To disable it set the
+environment variable XROOTDFS_NO_ALLOW_OTHER=1.
+
 Extended file system attributes:
 ===============================
 
diff --git a/src/XrdFfs/XrdFfsXrootdfs.cc b/src/XrdFfs/XrdFfsXrootdfs.cc
index 423b8141c2d..8bc4cf24f49 100644
--- a/src/XrdFfs/XrdFfsXrootdfs.cc
+++ b/src/XrdFfs/XrdFfsXrootdfs.cc
@@ -1233,7 +1233,7 @@ int main(int argc, char *argv[])
     cmdline_opts = (char **) malloc(sizeof(char*) * (argc -1 + 3));
     cmdline_opts[0] = argv[0];
     cmdline_opts[1] = strdup("-o");
-    if (getenv("XROOTDFS_NOALLOWOTHER") != NULL && ! strcmp(getenv("XROOTDFS_NOALLOWOTHER"),"1") )
+    if (getenv("XROOTDFS_NO_ALLOW_OTHER") != NULL && ! strcmp(getenv("XROOTDFS_NO_ALLOW_OTHER"),"1") )
         cmdline_opts[2] = strdup("fsname=xrootdfs,max_write=131072,attr_timeout=10,entry_timeout=10,negative_timeout=5");
     else
         cmdline_opts[2] = strdup("fsname=xrootdfs,allow_other,max_write=131072,attr_timeout=10,entry_timeout=10,negative_timeout=5");