Re: Forbidden commands

[Russ A. <ea...@ey...>]

Russ Allbery <ea...@ey...> writes:

> You unfortunately can't.  I couldn't convince myself that --daemon was
> safe in the rssh security model.

I should also add: If you're only using --daemon, consider whether the
arguments to rsync vary with each invocation.  I suspect that they don't,
in which case you could use SSH's force-command option for authorized_keys
rather than rssh.  This doesn't give you the chroot inherently, but you
could write a tiny helper that does the chroot, or use user namespaces to
achieve an equivalent end.

-- 
Russ Allbery (ea...@ey...)             <https://www.eyrie.org/~eagle/>