Re: rsync over ssh - possible attack vectors

2010-04-16 Thread Leen Besselink
On 04/16/2010 02:16 AM, George Sullivan wrote: Hello everybody! First my setup: I connect from Debian Lenny to Ubuntu Karmic with a command like: us...@localserver:$ rsync -rtcve ssh us...@remoteserver:/.../ /local/.../ (using default versions of ssh and rsync in the vendor repos, ssh with

Re: rsync over ssh - possible attack vectors

2010-04-16 Thread g. sullivan
Am 4/16/2010 10:37 AM, schrieb Leen Besselink: On 04/16/2010 02:16 AM, George Sullivan wrote: Hello everybody! snip Hello George, I'm no regular rsync-developer, but I like you paranoia so I'll answer with what I know. I'll start with 2 general tips: 1. if you want to know if a system

Re: rsync over ssh - possible attack vectors

2010-04-16 Thread Matt McCutchen
On Fri, 2010-04-16 at 02:16 +0200, George Sullivan wrote: us...@localserver:$ rsync -rtcve ssh us...@remoteserver:/.../ /local/.../ But what I'm interested in is what happens if remoteserver is compromised? Could attacker X on remoteserver alter the rsync binary in such a way so it can

Re: Risk of corrupting open sources files

2010-04-16 Thread Matt McCutchen
On Thu, 2010-04-15 at 17:41 -0700, Mohammed AlQuraishi wrote: I have a situation where the files I'm backing up are written to every fifteen minutes or so. There's a good possibility that rsync will try to copy a file while it is being written into, and I'm wondering if there's any risk that

Re: Risk of corrupting open sources files

2010-04-16 Thread Paul Slootman
On Fri 16 Apr 2010, Matt McCutchen wrote: Additionally, would the writing program be blocked from writing to the file if rsync is reading the file? Not on unix-like systems. OTOH, I believe Windows enforces read/write locking, so rsync could not have the file open for reading at the same

Random Timeouts?

2010-04-16 Thread Erich Weiler
Hi All, I was hoping someone could help me figure out what['s going on here... I have a server that I'm using to backup a lot of files to, and I'm using rsync to back them up. The backup server runs CentOS 5.4 Linux: # uname -a Linux slurp.kilokluster.ucsc.edu 2.6.18-164.15.1.el5 #1 SMP Wed

Re: Random Timeouts?

2010-04-16 Thread Paul Slootman
On Fri 16 Apr 2010, Erich Weiler wrote: As you can see, both sender and receiver are version 3.0.5. I read the docs and it seems to indicate that by default there is no timeout...? So the error messages are confusing I've found that it can help to actually configure a timeout; use the

Re: Random Timeouts?

2010-04-16 Thread Erich Weiler
Thanks! I'll give it a shot... Paul Slootman wrote: On Fri 16 Apr 2010, Erich Weiler wrote: As you can see, both sender and receiver are version 3.0.5. I read the docs and it seems to indicate that by default there is no timeout...? So the error messages are confusing I've found that

DO NOT REPLY [Bug 7368] New: Support --link-dest when receiving from a old version

2010-04-16 Thread samba-bugs
https://bugzilla.samba.org/show_bug.cgi?id=7368 Summary: Support --link-dest when receiving from a old version Product: rsync Version: 3.0.7 Platform: Other OS/Version: Linux Status: NEW Severity: enhancement

DO NOT REPLY [Bug 7368] Support --link-dest when receiving from a old version

2010-04-16 Thread samba-bugs
https://bugzilla.samba.org/show_bug.cgi?id=7368 --- Comment #1 from m...@mattmccutchen.net 2010-04-16 17:16 CST --- --link-dest support was added in rsync 2.5.6, so it should work when talking to rsync 2.6.3. Please post the exact error output you get. -- Configure bugmail:

Re: rsync over ssh - possible attack vectors

2010-04-16 Thread g. sullivan
On 4/16/2010 4:30 PM, Matt McCutchen wrote: On Fri, 2010-04-16 at 02:16 +0200, George Sullivan wrote: us...@localserver:$ rsync -rtcve ssh us...@remoteserver:/.../ /local/.../ The remote server can change arbitrary files on the local server by sending a symlink and then using paths that go

Re: rsync over ssh - possible attack vectors

2010-04-16 Thread Matt McCutchen
On Sat, 2010-04-17 at 02:17 +0200, g. sullivan wrote: On 4/16/2010 4:30 PM, Matt McCutchen wrote: On Fri, 2010-04-16 at 02:16 +0200, George Sullivan wrote: us...@localserver:$ rsync -rtcve ssh us...@remoteserver:/.../ /local/.../ The remote server can change arbitrary files on the local