Andrew Tridgell 808daef3e9 syscall: close the chmod leaf race with a held-fd fchmod
set_file_attrs() and the generator chmod a received entry by name relative to
the held parent dirfd.  A plain fchmodat(dfd, name, mode, 0) follows a
final-component symlink an attacker could swap in, escaping the confined tree.

do_fchmodat_nofollow() now stats the leaf NOFOLLOW and, for a regular file,
directory or FIFO, pins it with openat(O_RDONLY|O_NOFOLLOW) and fchmod()s the
held fd: leaf-safe, works on every kernel, and -- unlike the bare fchmodat2()
syscall -- goes through fchmod(), which LD_PRELOAD interceptors such as fakeroot
wrap.  A symlink leaf is refused (ELOOP).  Sockets/devices and any open failure
fall to fchmodat(AT_SYMLINK_NOFOLLOW), then the raw fchmodat2() syscall as a last
resort; if none is available we skip with a warning rather than fall back to a
leaf-following chmod.  Routes do_chmod_at() and do_chmod_atfd() through it.

(Backport of master 463aaa77; the openat2_usable() runtime probe and the
copy_file confinement-gate widening from that commit are omitted -- the former
needs infrastructure not on this branch, the latter is already present.)

(cherry picked from commit 77f5ed3da1a77754da470670629a7d67cee36460)
2026-06-15 12:23:19 +10:00
2022-10-16 10:28:58 -07:00
2022-10-20 17:50:06 -07:00
2020-07-15 10:20:52 -07:00
2026-05-07 07:23:37 +10:00
2022-08-14 10:15:08 -07:00
2022-08-14 10:15:08 -07:00
2026-05-07 07:23:37 +10:00
2021-09-26 18:55:46 -07:00
2026-05-07 07:23:37 +10:00
2020-06-16 21:24:23 -07:00
2020-06-16 21:24:23 -07:00
2021-09-26 16:57:55 -07:00
2019-03-16 09:15:49 -07:00
2020-06-25 20:54:21 -07:00
2020-06-13 19:15:02 -07:00
2020-06-27 21:19:52 -07:00
2022-09-30 12:36:21 -07:00
2022-01-15 17:21:01 -08:00
2022-08-03 09:55:51 -07:00
2019-03-16 09:15:49 -07:00
2019-03-16 09:15:49 -07:00
2022-01-15 17:21:01 -08:00
2026-05-07 07:21:57 +10:00
2021-12-27 17:40:31 -08:00
2022-08-23 15:30:32 -07:00
2020-06-25 20:54:21 -07:00
2020-06-13 19:15:02 -07:00
2022-03-26 08:58:51 -07:00
2022-01-15 17:21:01 -08:00
2022-03-26 08:58:51 -07:00
2020-06-22 14:21:15 -07:00
2021-09-26 16:44:00 -07:00
2022-10-16 12:27:30 -07:00
2022-01-15 17:21:01 -08:00
2020-09-02 14:49:20 -07:00
2026-05-07 07:22:39 +10:00
2020-06-22 14:21:15 -07:00
2022-08-01 18:51:07 -07:00
2026-05-08 08:20:48 +10:00
2026-05-07 07:18:39 +10:00
2026-06-13 06:04:47 +10:00

WHAT IS RSYNC?

Rsync is a fast and extraordinarily versatile file copying tool for both remote and local files.

Rsync uses a delta-transfer algorithm which provides a very fast method for bringing remote files into sync. It does this by sending just the differences in the files across the link, without requiring that both sets of files are present at one of the ends of the link beforehand. At first glance this may seem impossible because the calculation of diffs between two files normally requires local access to both files.

A technical report describing the rsync algorithm is included with this package.

USAGE

Basically you use rsync just like scp, but rsync has many additional options. To get a complete list of supported options type:

rsync --help

See the manpage for more detailed information.

BUILDING AND INSTALLING

If you need to build rsync yourself, check out the INSTALL page for information on what libraries and packages you can use to get the maximum features in your build.

SETUP

Rsync normally uses ssh or rsh for communication with remote systems. It does not need to be setuid and requires no special privileges for installation. You must, however, have a working ssh or rsh system. Using ssh is recommended for its security features.

Alternatively, rsync can run in `daemon' mode, listening on a socket. This is generally used for public file distribution, although authentication and access control are available.

To install rsync, first run the "configure" script. This will create a Makefile and config.h appropriate for your system. Then type "make".

Note that on some systems you will have to force configure not to use gcc because gcc may not support some features (such as 64 bit file offsets) that your system may support. Set the environment variable CC to the name of your native compiler before running configure in this case.

Once built put a copy of rsync in your search path on the local and remote systems (or use "make install"). That's it!

RSYNC DAEMONS

Rsync can also talk to "rsync daemons" which can provide anonymous or authenticated rsync. See the rsyncd.conf(5) manpage for details on how to setup an rsync daemon. See the rsync(1) manpage for info on how to connect to an rsync daemon.

WEB SITE

For more information, visit the main rsync web site.

You'll find a FAQ list, downloads, resources, HTML versions of the manpages, etc.

MAILING LISTS

There is a mailing list for the discussion of rsync and its applications that is open to anyone to join. New releases are announced on this list, and there is also an announcement-only mailing list for those that want official announcements. See the mailing-list page for full details.

BUG REPORTS

The bug-tracking web page has full details on bug reporting.

That page contains links to the current bug list, and information on how to do a good job when reporting a bug. You might also like to try searching the Internet for the error message you've received, or looking in the mailing list archives.

To send a bug report, follow the instructions on the bug-tracking page of the web site.

Alternately, email your bug report to rsync@lists.samba.org.

GIT REPOSITORY

If you want to get the very latest version of rsync direct from the source code repository, then you will need to use git. The git repo is hosted on GitHub and on Samba's site.

See the download page for full details on all the ways to grab the source.

Rsync was originally written by Andrew Tridgell and is currently maintained by Wayne Davison. It has been improved by many developers from around the world.

Rsync may be used, modified and redistributed only under the terms of the GNU General Public License, found in the file COPYING in this distribution, or at the Free Software Foundation.

S
Description
No description provided
Readme GPL-3.0
31 MiB
0 Stars 1 Watchers 0 Forks
Languages
C 47.3%
Python 43.1%
HTML 4.2%
M4 1.2%
Shell 0.8%
Other 3.3%