X-Git-Url: https://mattmccutchen.net/rsync/rsync.git/blobdiff_plain/38cef641a5d2f6506615f5b8e0c5bfea32ef62f6..bd685982389b78a158921b7839bdeca501338d19:/support/rrsync diff --git a/support/rrsync b/support/rrsync index 6e1a6eb8..e3c5d41a 100644 --- a/support/rrsync +++ b/support/rrsync @@ -39,6 +39,7 @@ die "$0: Restricted directory does not exist!\n" if $subdir ne '/' && !-d $subdi my $command = $ENV{SSH_ORIGINAL_COMMAND}; die "$0: Not invoked via sshd\n$Usage" unless defined $command; die "$0: SSH_ORIGINAL_COMMAND='$command' is not rsync\n" unless $command =~ s/^rsync\s+//; +die "$0: --server option is not first\n" unless $command =~ /^--server\s/; our $am_sender = $command =~ /^--server\s+--sender\s/; # Restrictive on purpose! die "$0 -ro: sending to read-only server not allowed\n" if $ro && !$am_sender; @@ -65,7 +66,7 @@ our %long_opt = ( 'compress-level' => 1, 'copy-dest' => 2, 'copy-unsafe-links' => 0, - 'daemon' => 0, + 'daemon' => -1, 'delay-updates' => 0, 'delete' => 0, 'delete-after' => 0, @@ -73,15 +74,18 @@ our %long_opt = ( 'delete-delay' => 0, 'delete-during' => 0, 'delete-excluded' => 0, + 'delete-missing-args' => 0, 'existing' => 0, 'fake-super' => 0, 'files-from' => 3, 'force' => 0, 'from0' => 0, 'fuzzy' => 0, + 'groupmap' => 1, 'iconv' => 1, 'ignore-errors' => 0, 'ignore-existing' => 0, + 'ignore-missing-args' => 0, 'inplace' => 0, 'link-dest' => 2, 'list-only' => 0, @@ -91,7 +95,6 @@ our %long_opt = ( 'max-size' => 1, 'min-size' => 1, 'modify-window' => 1, - 'no-i-r' => 0, 'no-implied-dirs' => 0, 'no-r' => 0, 'no-relative' => 0, @@ -108,11 +111,13 @@ our %long_opt = ( 'size-only' => 0, 'skip-compress' => 1, 'specials' => 0, + 'stats' => 0, 'suffix' => 1, 'super' => 0, 'temp-dir' => 2, 'timeout' => 1, 'use-qsort' => 0, + 'usermap' => 1, ); ### END of options data produced by the cull_options script. ### @@ -142,7 +147,8 @@ while ($command =~ /((?:[^\s\\]+|\\.[^\s\\]*)+)/g) { if ($_ eq '.') { $in_options = 0; } else { - next if /^-$short_no_arg+(e\d*\.\w*)?$/o || /^-$short_with_num\d+$/o; + die "$0: invalid option: '-'\n" if $_ eq '-'; + next if /^-$short_no_arg*(e\d*\.\w*)?$/o || /^-$short_with_num\d+$/o; my($opt,$arg) = /^--([^=]+)(?:=(.*))?$/; my $disabled; @@ -173,10 +179,10 @@ while ($command =~ /((?:[^\s\\]+|\\.[^\s\\]*)+)/g) { } else { if ($subdir ne '/') { # Validate args to ensure they don't try to leave our restricted dir. - s#//+#/#g; - s#^/##; - s#^$#.#; - die "Do not use .. in any path!\n" if m#(^|/)\\?\.\\?\.(\\?/|$)#; + s{//+}{/}g; + s{^/}{}; + s{^$}{.}; + die "$0: do not use .. in any path!\n" if m{(^|/)\\?\.\\?\.(\\?/|$)}; } push(@args, bsd_glob($_, GLOB_LIMIT|GLOB_NOCHECK|GLOB_BRACE|GLOB_QUOTE)); } @@ -203,10 +209,10 @@ sub check_arg my($opt, $arg, $type) = @_; $arg =~ s/\\(.)/$1/g; if ($subdir ne '/' && ($type == 3 || ($type == 2 && !$am_sender))) { - $arg =~ s#//#/#g; + $arg =~ s{//}{/}g; die "Do not use .. in --$opt; anchor the path at the root of your restricted dir.\n" - if $arg =~ m#(^|/)\.\.(/|$)#; - $arg =~ s#^/#$subdir/#; + if $arg =~ m{(^|/)\.\.(/|$)}; + $arg =~ s{^/}{$subdir/}; } $arg; }