[TAG] Securing rsync

[Benjamin Donnachie]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

mso at oz.net wrote:
> His main desire is not to grant a general-purpose account on the server, 
> so if I can convince him that rsync+ssh can be configured to grant
> access only for rsync in that directory, I may have a chance.

Take a look at rssh (http://www.pizzashack.org/rssh/index.shtml) or
scponly (http://sublimation.org/scponly/) - both can be used together
with ssh to restrict access to just rsync.

However, access to a single directory would probably require a user jail
- - all is explained in the rssh and scponly docs, but it's not really for
your "GUI" types.

Take care,

- --
Benjamin
benjamin at pythagoras.no-ip.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (MingW32)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
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=wbqy
-----END PGP SIGNATURE-----