Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

The uid is set to nobody (which should be default anyway), chroot and read only are both enabled. The rsync service is being started over /etc/init.d/rsync. This is the full rsrync.conf:

motd file = /etc/rsync/rsyncd.motd
max connections = 4
timeout = 30
uid = nobody
use chroot = true
address = my-ip

[ubuntu-releases]
   path = /usr/share/nginx/example.com/cdn/ubuntu-releases
   log file = /etc/rsync/rsync.log
   read only = true
   list = true

So my question is, if this is secure or did I miss anything?

I heard about rsync over ssh but I am not sure if this is only for private access.

share|improve this question

1 Answer 1

up vote 2 down vote accepted

Depends on what you mean with secure. It's not encrypted, so susceptible to traffic sniffing. It is 'secure' in the sense that, barring rsync bugs, users only have access to what's in /usr/share/nginx/example.com/cdn/ubuntu-releases

share|improve this answer
    
Thank you, yes I should have better explained what I mean by secure. And another short question: What does the string inside the [] brackets relate to? –  Mellnik Aug 27 '13 at 10:06
    
That's the name of the exported rsync module. It doesn't need need to match the directory name. –  Dennis Kaarsemaker Aug 27 '13 at 20:50

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.