Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

The uid is set to nobody (which should be default anyway), chroot and read only are both enabled. The rsync service is being started over /etc/init.d/rsync. This is the full rsrync.conf:

motd file = /etc/rsync/rsyncd.motd
max connections = 4
timeout = 30
uid = nobody
use chroot = true
address = my-ip

   path = /usr/share/nginx/
   log file = /etc/rsync/rsync.log
   read only = true
   list = true

So my question is, if this is secure or did I miss anything?

I heard about rsync over ssh but I am not sure if this is only for private access.

share|improve this question
up vote 2 down vote accepted

Depends on what you mean with secure. It's not encrypted, so susceptible to traffic sniffing. It is 'secure' in the sense that, barring rsync bugs, users only have access to what's in /usr/share/nginx/

share|improve this answer
Thank you, yes I should have better explained what I mean by secure. And another short question: What does the string inside the [] brackets relate to? – user176306 Aug 27 '13 at 10:06
That's the name of the exported rsync module. It doesn't need need to match the directory name. – Dennis Kaarsemaker Aug 27 '13 at 20:50

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.