X-Git-Url: https://mattmccutchen.net/rsync/rsync.git/blobdiff_plain/c1456d83a72215822732424304b1563a0a2c9d8f..cb290916bec971e8d14d8205b58739f9abf70fd2:/rsyncd.conf.yo diff --git a/rsyncd.conf.yo b/rsyncd.conf.yo index 71ca4604..aac28d72 100644 --- a/rsyncd.conf.yo +++ b/rsyncd.conf.yo @@ -135,12 +135,20 @@ to the "path" before starting the file transfer with the client. This has the advantage of extra protection against possible implementation security holes, but it has the disadvantages of requiring super-user privileges, of not being able to follow symbolic links outside of the new root path -when reading, and of implying the --numeric-ids option because /etc/passwd -becomes inaccessible. When "use chroot" is false, for security reasons +when reading, and of complicating the preservation of usernames and groups +(see below). When "use chroot" is false, for security reasons, symlinks may only be relative paths pointing to other files within the root path, and leading slashes are removed from absolute paths. The default for "use chroot" is true. +In order to preserve usernames and groupnames, rsync needs to be able to +lookup the IDs using getpuid() and getpgid(). This means that the chroot +area will need to have copies of your user/group information (edited, if +desired) inside the chroot tree for rsync to use (the traditional files +are /etc/passwd and /etc/group). If the needed files are not available, +rsync will only be able to copy the IDs, just as if the --numeric-ids +option had been specified. + dit(bf(max connections)) The "max connections" option allows you to specify the maximum number of simultaneous connections you will allow. Any clients connecting when the maximum has been reached will receive a