remote logging non-daemon mode

[foner-rsync at media.mit.edu]

    > Date: Wed, 5 Dec 2007 23:21:27 -0500
    > From: "Doug Lochart" <dlochart at gmail.com>

    > Each module needs to be protected from the others so if a user logs in with
    > their credentials they should not have access to any other module.   It
    > would take a user knowing the name of another client to affect the security
    > breach.  I admit I am no whiz at securing the rsync server.  Once we had it
    > setup to run in daemon mode we assumed the ssh tunnels would provide all
    > that we need.  We over looked this one issue however.

Are users supposed to be running any arbitrary rsync command they like
when they connect, or is there a canonical one for doing the backup?

If the latter, can you use ssh's "forced command" mode, with a
different command associated with each user?

Hmm.  I just did a search and found this, from two months ago:
http://www.mail-archive.com/rsync@lists.samba.org/msg19657.html

Relevant?