rssh ignores some access bits
Brought to you by:
xystrus
From: <rss...@as...> - 2004-05-25 07:07:00
|
Consider the following line in /etc/rssh.conf: user = test:002:11111: If I read the documentation correctly, test should be able to rsync, rdist, cvs, sftp and scp. However only sftp and scp seem to be honored: May 24 23:28:18 hostname rssh[17811]: setting log facility to LOG_USER May 24 23:28:18 hostname rssh[17811]: setting umask to 022 May 24 23:28:18 hostname rssh[17811]: line 50: configuring user test May 24 23:28:18 hostname rssh[17811]: setting test's umask to 02 May 24 23:28:18 hostname rssh[17811]: allowing scp to user test May 24 23:28:18 hostname rssh[17811]: allowing sftp to user test If I comment OUT / remove the "user = test:002:11111:" line, and comment IN / enable all 5 global allow* lines: allowscp allowsftp allowcvs allowrdist allowrsync ... #user = test:002:11111: I get: May 25 00:00:36 hostname rssh[18139]: setting log facility to LOG_USER May 25 00:00:36 hostname rssh[18139]: allowing scp to all users May 25 00:00:36 hostname rssh[18139]: allowing sftp to all users May 25 00:00:36 hostname rssh[18139]: allowing cvs to all users May 25 00:00:36 hostname rssh[18139]: allowing rdist to all users May 25 00:00:36 hostname rssh[18139]: allowing rsync to all users May 25 00:00:36 hostname rssh[18139]: setting umask to 022 A test of rsync shows that it works when the global 'allowrsync' is set and the user line is commented out. However rsync fails with the '11111' access bits for a particular user is used. I am using the rssh v2.2.0 source tarball on RHEL3. chongo (http://www.isthe.com/chongo/index.html) /\oo/\ |