rsync - Jan 2005 - [Bug 2207] Listing of available sync-sets is very different with and without daemon mode

https://bugzilla.samba.org/show_bug.cgi?id=2207


wayned@samba.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|NEW                         |RESOLVED
         Resolution|                            |INVALID
            Summary|Listing of available sync-  |Listing of available sync-
                   |sets is very different with |sets is very different with
                   |or without ssh              |and without daemon mode




------- Additional Comments From wayned@samba.org  2005-01-02 17:57 -------
If the user has ssh access to a system, they can run any command they wish,
including "rm" or "bash", so it is not a security risk that
rsync also lets them
access/manipulate all the same files as any other command.

You may wish to look into ssh's restricted command features if you don't
wish to
let users run certain commands via ssh (such as rsync).

If you're wanting to secure the daemon mode access, use some kind of tunnel,
such as stunnel to secure the socket connections:

    http://www.stunnel.org/examples/rsync_mike.html

-- 
Configure bugmail: https://bugzilla.samba.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.

https://bugzilla.samba.org/show_bug.cgi?id=2207


sten.carlsen@image.dk changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|RESOLVED                    |REOPENED
         Resolution|INVALID                     |




------- Additional Comments From sten.carlsen@image.dk  2005-01-02 18:18 -------
The other half of the bug is that it does not allow transfers to folders outside
my own home.

At lest not directly from the command line. Have I missed a way to do that?

My point with this is that I actually found this bug by doing sync of the exact
same data with the exact same command line from the exact same folder and the
result was that I had two different synchronised datasets.

Basically it does not seem to use rsyncd.conf when going over ssh.

What did I miss?

-- 
Configure bugmail: https://bugzilla.samba.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.

https://bugzilla.samba.org/show_bug.cgi?id=2207


wayned@samba.org changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
             Status|REOPENED                    |RESOLVED
         Resolution|                            |INVALID




------- Additional Comments From wayned@samba.org  2005-01-02 18:39 -------
(In reply to comment #2)
> Basically it does not seem to use rsyncd.conf when going over ssh.
That's the difference between daemon mode and remote-shell mode.  See the
docs:

    http://rsync.samba.org/ftp/rsync/rsync.html

The difference has nothing to do with ssh and everything to do with using either
":" or "::" -- yes, they're radically different.

-- 
Configure bugmail: https://bugzilla.samba.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the QA contact for the bug, or are watching the QA contact.