Add --chmod-dest option for handling --fake-super permissions
Graham Leggett via rsync <[email protected]> Tue, 24 Mar 2026 09:39:00 +0000
| Newsgroups | gmane.network.rsync.general |
|---|---|
| Message-ID | <[email protected]> |
--===============8262537652536689836== Content-Type: multipart/alternative; boundary="Apple-Mail=_D34EE399-DCB1-4E73-BB0C-B13012AFB8E2" --Apple-Mail=_D34EE399-DCB1-4E73-BB0C-B13012AFB8E2 Content-Transfer-Encoding: quoted-printable Content-Type: text/plain; charset=us-ascii Hi all, Quickly drawing attention to the PR below, which solves a permissions = problem for us. https://github.com/RsyncProject/rsync/pull/751 We back up unix hosts, and the remote permissions are stored in = attributes as per --fake-super, so far so good. We also need to give people user level - not root - access to these = backups, and this is currently impossible because the remote permissions = stored in the attributes are also applied to the files themselves. The = only way to get access to the backup files is to have root access to the = backup box, which means you can destroy the backup box if you choose to. The patch solves the problem by optionally only storing remote = permissions in attributes, and leaving the actual backup file = permissions to permissions that make sense on the backup box. In other words, you can give read access to backups now. Regards, Graham -- --Apple-Mail=_D34EE399-DCB1-4E73-BB0C-B13012AFB8E2 Content-Transfer-Encoding: quoted-printable Content-Type: text/html; charset=us-ascii <html><head><meta http-equiv=3D"content-type" content=3D"text/html; = charset=3Dus-ascii"></head><body style=3D"overflow-wrap: break-word; = -webkit-nbsp-mode: space; line-break: after-white-space;"><div>Hi = all,</div><div><br></div><div>Quickly drawing attention to the PR below, = which solves a permissions problem for us.</div><div><br></div><div><a = href=3D"https://github.com/RsyncProject/rsync/pull/751">https://github.com= /RsyncProject/rsync/pull/751</a></div><div><br></div><div>We back up = unix hosts, and the remote permissions are stored in attributes as per = --fake-super, so far so good.</div><div><br></div><div>We also need to = give people user level - not root - access to these backups, and this is = currently impossible because the remote permissions stored in the = attributes are also applied to the files themselves. The only way to get = access to the backup files is to have root access to the backup box, = which means you can destroy the backup box if you choose = to.</div><div><br></div><div>The patch solves the problem by optionally = only storing remote permissions in attributes, and leaving the actual = backup file permissions to permissions that make sense on the backup = box.</div><div><br></div><div>In other words, you can give read access = to backups = now.</div><div><br></div><div>Regards,</div><div>Graham</div><div>--</div>= <div><br></div></body></html>= --Apple-Mail=_D34EE399-DCB1-4E73-BB0C-B13012AFB8E2-- --===============8262537652536689836== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline -- Please use reply-all for most replies to avoid omitting the mailing list. To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html --===============8262537652536689836==--