On Tue, Mar 22, 2011 at 5:19 AM, Peter Robinson <[email protected]> wrote:
> Why can't you give rsync the appropriate capabilities

That would be "read any file, even those owned by root and only
root-readable". If we do that. we allow an un-privileged rsync to
literally read any file in the fs. You only need to spot a trivial bug
in rsync or our rsync configuration to say hi to /etc/shadow and
/home/*/.ssh/id_rsa :-)

cheers,



m
-- 
 [email protected]
 [email protected] -- Software Architect - OLPC
 - ask interesting questions
 - don't get distracted with shiny stuff  - working code first
 - http://wiki.laptop.org/go/User:Martinlanghoff
_______________________________________________
Devel mailing list
[email protected]
http://lists.laptop.org/listinfo/devel

Reply via email to