From fa8c787d8b2b0de3d6afa5fbf72cf59cf03313b8 Mon Sep 17 00:00:00 2001 From: Wayne Davison Date: Fri, 23 Jan 2004 09:30:45 +0000 Subject: [PATCH] Improved the "use chroot" section to mention how to get user/group preservation by name (getting rid of the erroneous bit about the --numeric-ids option being implied). --- rsyncd.conf.yo | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/rsyncd.conf.yo b/rsyncd.conf.yo index 71ca4604..a4fa4f05 100644 --- a/rsyncd.conf.yo +++ b/rsyncd.conf.yo @@ -135,8 +135,10 @@ to the "path" before starting the file transfer with the client. This has the advantage of extra protection against possible implementation security holes, but it has the disadvantages of requiring super-user privileges, of not being able to follow symbolic links outside of the new root path -when reading, and of implying the --numeric-ids option because /etc/passwd -becomes inaccessible. When "use chroot" is false, for security reasons +when reading, and of complicating the preservation of usernames and groups +(you'll need to supply in-chroot versions of etc/passwd and etc/group if +you want named-based user/group mapping to be performed). +When "use chroot" is false, for security reasons, symlinks may only be relative paths pointing to other files within the root path, and leading slashes are removed from absolute paths. The default for "use chroot" is true. -- 2.34.1