ssh_filter_btrbk: always allow pipes through compression commands

pull/135/head
Axel Burri 2017-03-17 21:35:16 +01:00
parent da70158c24
commit 690a8158ed
2 changed files with 7 additions and 3 deletions

View File

@ -20,11 +20,15 @@ the "\-\-source", "\-\-target", "\-\-delete" and "\-\-info" options.
Note that the following btrfs commands are always allowed: "btrfs
subvolume show", "btrfs subvolume list".
.PP
Note that commands for stream compression (pipes through gzip, pigz,
bzip2, pbzip2, xz, lzo, lz4) as well as rate limiting (pipes through
"pv -L") are always allowed.
.PP
Example line in /root/.ssh/authorized_keys on a backup target host:
.PP
.RS 4
.nf
command="ssh_filter_btrbk.sh \-\-target \-\-delete \-\-compress \-\-restrict\-path /mnt/btr_backup" ssh\-rsa AAAAB3NzaC1...hwumXFRQBL btrbk@mydomain.com
command="ssh_filter_btrbk.sh \-\-target \-\-delete \-\-restrict\-path /mnt/btr_backup" ssh\-rsa AAAAB3NzaC1...hwumXFRQBL btrbk@mydomain.com
.fi
.RE
.SH OPTIONS

View File

@ -10,7 +10,7 @@ restrict_path_list=
allow_list=
allow_exact_list=
allow_rate_limit=1
allow_compress=
allow_compress=1
compress_list="gzip|pigz|bzip2|pbzip2|xz|lzo|lz4"
log_cmd()
@ -125,7 +125,7 @@ while [[ "$#" -ge 1 ]]; do
;;
-c|--compress)
allow_compress=1
# deprecated option, compression is always allowed
;;
-d|--delete)