Security issues when rsyncing directories as root

2018-10-18 Thread Marc Haber via rsync
Hi, I am using rsync to keep two directores on two servers in sync. Machine A, the "client" is the one where the rsync process is invoked, which then logs into Machine B, the "server" as root with ssh and a key. The key is restricted in /root/.ssh/authorized_keys to a script that checks wither

Re: Security issues when rsyncing directories as root

2018-10-18 Thread Kevin Korb via rsync
Use rrsync. It comes with rsync (some silly Linux distros install it as documentation instead of a helper script so you have to decompress it and chmod +x it). It is a perl script with all the documentation in the comments. Yes, it can be done with rsyncd as you described. The rsyncd.conf file

patch for consideration - support empty '@' in do_cmd()

2018-10-18 Thread matthew patton via rsync
It's not exactly un-common to use an "empty" @ in SCP or SFTP connection strings. Rsync though injects a dangling '-l' when constructing the SSH command-line. Sure, maybe the answer is "stop doing that" but the fix is really simple and I think worth implementing. diff --git a/main.c b/main.c

Cygwin build fails because headers no longer default to Solaris ACL

2018-10-18 Thread matthew patton via rsync
Unfortunately I don't know how to write AC macros to properly solve this problem but Cygwin does not (any longer) include cygwin/acl.h from sys/acls.h which is required for Solaris ACL data structures to work. So the CASE statement improperly short-circuits the logic. I have confirmed that

[Bug 13660] New: State clearly in manpage that --append-verify is an edge-case

2018-10-18 Thread just subscribed for rsync-qa from bugzilla via rsync
https://bugzilla.samba.org/show_bug.cgi?id=13660 Bug ID: 13660 Summary: State clearly in manpage that --append-verify is an edge-case Product: rsync Version: 3.1.3 Hardware: All OS: All Status: