handling of 'use chroot'
mbp at samba.org
Sat Sep 1 09:41:13 EST 2001
On 31 Aug 2001, Dave Dykstra <dwd at bell-labs.com> wrote:
> I think that all we should do is provide a more useful error message when
> not running as root and the "use chroot = no" option has not been
> specified, a message that suggests using "use chroot = no". I implemented
> "use chroot = no" because I wanted to run rsync --daemon as a non-privileged
> user, and I'm not entirely confident about the checks I put in place to
> prevent somebody from accessing any files outside the root directory. I
> think they're right, but as far as I know nobody but me has ever tried very
> hard to break it. I'd rather have people who aren't running rsync as root
> be forced to realize that they aren't getting as good protection.
OK, that sounds good to me: if they install as non-root, then they
don't get such good protection, but at least it works. This might
also prevent breakage on platforms where chroot links but does not
work, such as (perhaps?) NT.
More information about the rsync