configuration question.

tim.conway@philips.com
Tue, 29 Oct 2002 20:41:00 -0000

Your users have rsh access to the machine, and are getting wherever they
want, using the server:/path syntax.
if they were using the server::module syntax, they would be restricted to
only what's provided by the modules.  If you don't want them getting
everything all over the system, you will need to prevent shell access.

Tim Conway
conway.tim@sphlihp.com reorder name and reverse domain
303.682.4917 office, 303.921.0301 cell
Philips Semiconductor - Longmont TC
1880 Industrial Circle, Suite D
Longmont, CO 80501
Available via SameTime Connect within Philips, caesupport2 on AIM
"There are some who call me.... Tim?"




"Armin Safarians" <armin.safarians@safeway.com>
Sent by: rsync-admin@lists.samba.org
10/29/2002 01:11 PM


        To:     rsync@samba.org
        cc:     (bcc: Tim Conway/LMT/SC/PHILIPS)
        Subject:        configuration question.
        Classification:



How do you restrict rsync transfers to only modules in the configuration
file?
It seems like even though I have a module configured, users can transfer
files
that they had permission to which is not under the directory of the
module.

I.E.
modulename
    path=/web
    ...
    ...
    ...

Users can get /etc/passwd from this machine. How do I restrict that.


Thanks,
AMS