On Friday 12 February 2010 13:23:18 [email protected] wrote:
> > On Fri, 2010-02-12 at 10:24 +1100, James Gray wrote:
> 
> need to sync a number of files between these servers and some require
> elevated (root) privileges at both ends.  Here lies the problem; we
> don't allow remote root logins (via SSH or any other method
> either...sudo, console or nadda).
> 
> > I have done this using sudo.  I write a script on the called machine,
> > sign on as my user and run the script using sudo which I authorise (very
> > specifically) to root without password.
> 
> He says that he can't use sudo.
> 
> However Google'ing for "offline rsync" reminded me of rdiff - here is
> a use case which sounds similar to yours:
> http://users.softlab.ece.ntua.gr/~ttsiod/Offline-rsync.html

So you want root privilege without using any of the standard root-privilege-
mechanisms
Wow, he said scathingly, that deserves a prize.

Actually you should start at the beginning, take a deep breath, and clearly 
decide what you are trying to achieve then how to do that securely including 
physical access to the remote machine. That is a very very easy way to 
compromise your server (hint knoppix or any live CD)

"You were mugged on the train and lost your rdiff mem stick" illustrates the 
foolhardy nature of your thinkings

James
-- 
SLUG - Sydney Linux User's Group Mailing List - http://slug.org.au/
Subscription info and FAQs: http://slug.org.au/faq/mailinglists.html

Reply via email to