> Date: Wed, 5 Dec 2007 23:21:27 -0500 > From: "Doug Lochart" <[EMAIL PROTECTED]>
> Each module needs to be protected from the others so if a user logs in with > their credentials they should not have access to any other module. It > would take a user knowing the name of another client to affect the security > breach. I admit I am no whiz at securing the rsync server. Once we had it > setup to run in daemon mode we assumed the ssh tunnels would provide all > that we need. We over looked this one issue however. Are users supposed to be running any arbitrary rsync command they like when they connect, or is there a canonical one for doing the backup? If the latter, can you use ssh's "forced command" mode, with a different command associated with each user? Hmm. I just did a search and found this, from two months ago: http://www.mail-archive.com/rsync@lists.samba.org/msg19657.html Relevant? -- To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html