Why is -e sent to the remote rsync side?
Shachar Shemesh
shachar at shemesh.biz
Sun Oct 5 04:47:47 GMT 2008
> $ rsync -e 'ssh -v' lingnu.com:
> OpenSSH_5.1p1 Debian-2, OpenSSL 0.9.8g 19 Oct 2007
> debug1: Reading configuration data /etc/ssh/ssh_config
> debug1: Applying options for *
> debug1: Connecting to lingnu.com [199.203.56.105] port 22.
> debug1: Connection established.
...
> debug1: Sending command: rsync --server --sender -de.L .
As we can see, rsync runs ssh, and tells it to run, on the other side,
rsync with the "-e" flag. I am not really sure what and how the "." and
"L" are parsed by rsync (part of my problem).
The reason this is brought up is because I'm using rssh
(http://www.pizzashack.org/rssh/) as the user's shell to limit that user
to only be allowed to run rsync. Rssh, however, prevent the passing of
the "-e" option to rsync, as it claims (with some amount of
justification) that this option allows someone to cause rsync to run any
command at all, escaping the limitations imposed by rssh.
So my questions:
1. Why does rsync need to pass "-e" to the remote side? After all, the
connection is already established at that point.
2. What does this -e mean? What causes the remote side to really not run
anything (trying to run ".L" from the path would be the way I would
interpret the command at that point - obviously rsync disagrees :-)
Thanks,
Shachar
More information about the rsync
mailing list