[Bug 2207] Listing of available sync-sets is very different with and without daemon mode

samba-bugs at samba.org samba-bugs at samba.org
Mon Jan 3 00:57:16 GMT 2005


https://bugzilla.samba.org/show_bug.cgi?id=2207


wayned at samba.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID
            Summary|Listing of available sync-  |Listing of available sync-
                   |sets is very different with |sets is very different with
                   |or without ssh              |and without daemon mode




------- Additional Comments From wayned at samba.org  2005-01-02 17:57 -------
If the user has ssh access to a system, they can run any command they wish,
including "rm" or "bash", so it is not a security risk that rsync also lets them
access/manipulate all the same files as any other command.

You may wish to look into ssh's restricted command features if you don't wish to
let users run certain commands via ssh (such as rsync).

If you're wanting to secure the daemon mode access, use some kind of tunnel,
such as stunnel to secure the socket connections:

    http://www.stunnel.org/examples/rsync_mike.html

-- 
Configure bugmail: https://bugzilla.samba.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.


More information about the rsync mailing list