[scponly] Extra characters in rsync arguments of scponly

Jérôme iutman at hotmail.com
Wed Oct 7 07:33:37 EDT 2009


Hello,

I got a double bug using the latest version (4.8) of scponlyc (with the
4,6, it worked pretty well after a few tweaks in the .h files).

*** environment ***

I am using FreeBSD 7.2, OpenSSH_5.2p1, scponly 4.8, rsync version 3.0.6
protocol version 30.

*** 1st bug ***

I have 2 different linux clients that connect to a chrooted environment
from 2 different linux clients.

client1 : rsync version 2.6.9
client2 : version 3.0.6 (same than the server)

The same command line works for the "old" client1 and not for "client2".
The very same command line ! Here is the auth.log, there is an extra
".is" that appeared, I do not know what it is. the rsync options of my
command line are : "-avx --delete -e ssh -C --bwlimit=90 -F
--exclude=.corbeille"

*** auth.log ***
Oct  5 16:46:10 verdi scponly[76594]: option 'e' or a related long
option is not permitted for use with /usr/local/bin/rsync (arg was .is)
(username: client2(3401), IP/port: 194.206.162.246 54917 22))
Oct  5 16:46:10 verdi scponly[76594]: requested command
(/usr/local/bin/rsync --server -vlogDtprCxe.is --bwlimit=90 --delete .
sauvegardes/datas) tried to use disallowed argument (username:
client2(3401), IP/port: 194.206.162.246 54917 22))
Oct  5 16:46:37 verdi scponly[76627]: running: /usr/local/bin/rsync
--server -vlogDtprCx --bwlimit=90 --delete . /sauvegardes (username:
client1(3700), IP/port: 83.167.146.182 46600 22)

*** temporary resolution ***

I solved it temporarily using "--protocol=29" in the command line, to
have the same behaviour than with the 4.6 version of scponly

*** 2nd bug ***

I created a chroot environment, that really is executed and works (if I
do not copy the version of rsync, I get an error message about rsync
missing), my shell for the two users is /usr/local/sbin/scponlyc, but
when I connect in sftp... I can get the whole root of the server !

Thanks for your help !

Jérôme.





More information about the scponly mailing list