Re: is "unintended library loading" actually possible?

2018-06-09 Thread Kevin Korb via rsync
Chroot is not a secure function. If not implemented very carefully it can seriously undermine security rather than enhancing it. If your concern is security maybe you shouldn't be using rsyncd at all. Rsync over ssh works very well and has far superior authentication. It can also be restricted

[Bug 13445] Fuzzy searching in link-dest tries to open regular file as directory

2018-06-09 Thread just subscribed for rsync-qa from bugzilla via rsync
https://bugzilla.samba.org/show_bug.cgi?id=13445 --- Comment #6 from Ben RUBSON --- Created attachment 14231 --> https://bugzilla.samba.org/attachment.cgi?id=14231=edit Patch using FLAG_PERHAPS_DIR Here is a working patch using the method detailed in comment #2. -- You are receiving this

is "unintended library loading" actually possible?

2018-06-09 Thread a.ikonnikov--- via rsync
Please, help me understand if 'use chroot' option in daemon config is secure enough. Rsync manual has following lines: As an additional safety feature, you can specify a dot-dir in the module's "path" to indicate the point where the chroot should occur.  This allows rsync to run