ssh_filter_btrbk: always allow pipes through compression commands

pull/135/head
Axel Burri 2017-03-17 21:35:16 +01:00
parent da70158c24
commit 690a8158ed
2 changed files with 7 additions and 3 deletions

View File

@ -20,11 +20,15 @@ the "\-\-source", "\-\-target", "\-\-delete" and "\-\-info" options.
Note that the following btrfs commands are always allowed: "btrfs Note that the following btrfs commands are always allowed: "btrfs
subvolume show", "btrfs subvolume list". subvolume show", "btrfs subvolume list".
.PP .PP
Note that commands for stream compression (pipes through gzip, pigz,
bzip2, pbzip2, xz, lzo, lz4) as well as rate limiting (pipes through
"pv -L") are always allowed.
.PP
Example line in /root/.ssh/authorized_keys on a backup target host: Example line in /root/.ssh/authorized_keys on a backup target host:
.PP .PP
.RS 4 .RS 4
.nf .nf
command="ssh_filter_btrbk.sh \-\-target \-\-delete \-\-compress \-\-restrict\-path /mnt/btr_backup" ssh\-rsa AAAAB3NzaC1...hwumXFRQBL btrbk@mydomain.com command="ssh_filter_btrbk.sh \-\-target \-\-delete \-\-restrict\-path /mnt/btr_backup" ssh\-rsa AAAAB3NzaC1...hwumXFRQBL btrbk@mydomain.com
.fi .fi
.RE .RE
.SH OPTIONS .SH OPTIONS

View File

@ -10,7 +10,7 @@ restrict_path_list=
allow_list= allow_list=
allow_exact_list= allow_exact_list=
allow_rate_limit=1 allow_rate_limit=1
allow_compress= allow_compress=1
compress_list="gzip|pigz|bzip2|pbzip2|xz|lzo|lz4" compress_list="gzip|pigz|bzip2|pbzip2|xz|lzo|lz4"
log_cmd() log_cmd()
@ -125,7 +125,7 @@ while [[ "$#" -ge 1 ]]; do
;; ;;
-c|--compress) -c|--compress)
allow_compress=1 # deprecated option, compression is always allowed
;; ;;
-d|--delete) -d|--delete)