On Fri 10 Apr 2026, Kevin Korb via rsync wrote:
> 
> I didn't mean that almost nobody uses the read only option in rsyncd.conf.
> I meant that almost nobody uses rsyncd at all.  Publishing publicly
> available read only repositories is one of the things it is still used for.

I use it extensively for backups in our "private cloud" network, and 
elsewhere, together with appropriate firewall rules.
I trust rsyncd with appropriate "hosts allow", "uid" and "read only = 
yes" in de modules definitions more than hoping that no one ever makes 
an error in locking down root ssh access.

> Rsync over ssh isn't just about encryption it is also about the far superior
> authentication capabilities of ssh.  Like ssh keys. This is especially
> important when rsyncing as root for system backups.

FWIW the (admittedly) simplistic rsync authentication can add a bit more 
security to an rsyncd setup.


Paul

-- 
Please use reply-all for most replies to avoid omitting the mailing list.
To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html

Reply via email to