[Bug 1573] New: module revealed thru error msg even with "list = no"

samba-bugs at samba.org samba-bugs at samba.org
Fri Jul 30 18:42:20 GMT 2004


https://bugzilla.samba.org/show_bug.cgi?id=1573

           Summary: module revealed thru error msg even with "list = no"
           Product: rsync
           Version: 2.6.2
          Platform: All
        OS/Version: Linux
            Status: NEW
          Severity: normal
          Priority: P3
         Component: core
        AssignedTo: wayned at samba.org
        ReportedBy: widyono at seas.upenn.edu
         QAContact: rsync-qa at samba.org
                CC: widyono at seas.upenn.edu


"list = no" correctly hides via rsync _server_::, however if one tries
rsync _server_::_existing-module_/ and does not have permission, one gets
@ERROR: access denied to _user_ from _client_, whereas an attempt for a
non-existent module emits @ERROR: Unknown module '_non-existent-module_'

If "list = no" is used for security purposes (can't think of another reason at
the moment), this can be considered a security bug and thus I left severity at
normal instead of labeling it minor.

-- 
Configure bugmail: https://bugzilla.samba.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.


More information about the rsync mailing list