Arrsync run as root full#

rsync is a very powerful tool to manipulate files, so now rsyncuser has a very powerful tool to manipulate files with root permissions.

With the recommended configuration, rsyncuser may now run rsync as root without even being asked for a password.

Arrsync run as root full#

You Easy to gain a full root shell because rsync executed with sudo? Walk e that please. For example this suggestion:Īdd the following to your /etc/sudoers file: rsyncuser ALL= NOPASSWD:/usr/bin/rsyncĮssentially gives rsyncuser root permissions anyway. Sudo, especially combined with NOPASSWD as recommended in the comments, has no security benefits over just using the root account. Then the resulting setup should be pretty safe. Now your backup machine has root access to your target machine, without having to use password authentication.Append the contents of /root/.ssh/id_rsa.pub of the backup machine to the /root/.ssh/authorized_keys of your target machine.

Google a tutorial if you need details for this, there should be plenty. Use ssh-keygen on the machine that pulls the backup to create an SSH private key (only if you don't already have an SSH key).Configure your sshd_config on the target machine to PermitRootLogin without-password.I would recommend that you just use the root account in the first place.