77a39282de
ssh_filter_btrbk.sh: allow quoted files
2021-08-18 02:08:28 +02:00
f7d3823d5d
ssh_filter_btrbk.sh: fix files are always absolute
2021-08-18 02:08:28 +02:00
58212de771
ssh_filter_btrbk.sh: fix alternation regex
...
Security vulnerability fixed in alternation regex. Specialy crafted
commands may be executed without being propely checked.
Affects all versions >= btrbk-v0.23.0
Regression from:
ccb5ed5e71
2021-03-21 13:24:59 +01:00
3562e75a70
btrbk: add support for zstandard (zstd) compression
2020-12-26 15:46:20 +01:00
ec037952cf
btrbk: add "compat" config option (busybox: add test -d command)
...
Add compat, compat_local, compat_remote configuration options.
Used for busybox: instead of running `readlink -e` (which is not
available on busybox), run `readlink -f` followed by `test -d`.
2020-08-28 21:19:21 +02:00
73b339fe01
documentation: fix spelling
2020-02-09 16:14:50 +01:00
c03e960d90
ssh_filter_btrbk.sh: exclude "btrfs subvolume show|list" from restrict-path
...
btrbk requires "btrfs subvolume list|show" queries from the mount
point in order to build btrfs trees. This conflicts with tightly set
--restrict-path.
2020-01-02 17:56:03 +01:00
0f21df15c2
ssh_filter_btrbk.sh: whitelist mkdir for 'btrbk archive' operations
2019-10-27 12:24:00 +01:00
3631cf6c7f
ssh_filter_btrbk.sh: cosmetics: show unsafe character
2019-09-08 18:23:30 +02:00
6227bb591a
ssh_filter_btrbk.sh: return exit status 255 on error
...
This makes btrbk regard ssh_filter_btrbk errors as ssh errors, as ssh
also returns exit status 255 if an error occurred.
2019-09-08 18:23:29 +02:00
8d0d7edda7
ssh_filter_btrbk.sh: adaptions, use mbuffer for rate_limit
2019-08-05 14:54:04 +02:00
0e6c1f9025
btrbk: fix regression: call "sudo readlink" for backend=btrfs-progs-sudo
...
It is possible that the subvolume path is not accessible by the user
calling btrbk. When resolving mount points, "readlink" is used on the
path, which also needs to be wrapped with "sudo".
2018-12-05 22:01:07 +01:00
526e332b02
ssh_filter_btrbk.sh: bugfix: ignore --restrict-path for "btrfs subvolume list"
...
btrbk now runs "btrfs subvolume list" from the mountpoint instead of
the volume path, which for some users is not below --restrict-path. As
the output of "btrfs subvolume list" is the same (complete btrfs tree
for the filesystem), it is ok to ignore the restrict-path here.
2018-10-10 22:51:13 +02:00
069304f3bb
btrbk: use system_list_mountinfo(), remove system_list_mounts(); rename fs_spec -> mount_source
...
Reasons for changing to `cat /proc/self/mountinfo`:
- `/proc/self/mounts` (or `/proc/mounts`) lacks extra info
(namespaces) and is not documented in kernel (deprecated?).
- findmnt(8) also uses /proc/self/mountinfo
Refs:
- https://www.kernel.org/doc/Documentation/filesystems/proc.txt
- https://bugzilla.redhat.com/show_bug.cgi?id=491924
- https://git.kernel.org/pub/scm/linux/kernel/git/bwh/linux-stable.git/commit/?id=2d4d4864ac08caff5c204a752bd004eed4f08760
2018-08-27 14:54:32 +02:00
78cec36e30
ssh_filter_btrbk: tighten decompress match expression
2018-07-12 18:26:35 +02:00
cb5e361f7a
btrbk: add --rootid command option for "btrfs subvolume show"
2018-07-09 16:13:00 +02:00
b37ef84e36
btrbk: always read mountpoints; include all snapshots from mountpoint as candidates for best common parent
...
Dropped readin of subvolid and realpath by btrfs_subvolume_show(), we
now always read /proc/self/mounts (and call readlink).
When picking the best common parent in get_best_parent(), we want to
list as many snapshots as possible. For now, we list all from the
mountpoint of snaproot ($sroot/<snapshot_dir>), due to a bug in
btrfs-progs [1]. Also added code (commented out) to list snapshots
from all known mountpoints.
[1] https://github.com/kdave/btrfs-progs/issues/96
2018-05-10 11:48:05 +02:00
b1f3936826
ssh_filter_btrbk: bugfix: use "lzop" instead of "lzo" for lzo compression command
2017-08-21 14:42:01 +02:00
ee17c1a2b4
ssh_filter_btrbk: accept mbuffer command (stream_compress)
2017-08-21 14:39:40 +02:00
690a8158ed
ssh_filter_btrbk: always allow pipes through compression commands
2017-03-18 12:19:07 +01:00
da70158c24
ssh_filter_btrbk: correctly handle --sudo option
2017-03-18 12:19:07 +01:00
3b7ede773a
btrbk: bugfix: make sure rate limiting comes after compression in cmd_pipe
2017-03-18 12:18:47 +01:00
cb82bd5fa4
btrbk: add supoort for "backend btrfs-progs-sudo" option; adaptions in ssh_filter_btrbk.sh
2017-01-04 15:04:22 +01:00
8f7d3e3c3d
ssh_filter_btrbk: bugfix: use eval when running $SSH_ORIGINAL_COMMAND (does not faile with pipes)
2016-08-21 11:51:55 +02:00
deeb12c069
ssh_filter_btrbk: allow stream compression if --compress option is set.
2016-08-19 17:36:40 +02:00
edffbd4af9
ssh_filter_btrbk: update ssh_filter_btrbk.sh to use readlink
...
bugfix for: 796b6bd9bf796b6bd
2016-08-19 01:05:02 +02:00
81feb41619
ssh_filter_btrbk: allow access to "/" if no path restrictions are set.
2016-04-25 16:58:56 +02:00
407d25f604
ssh_filter_btrbk: cosmetics: fix indentation (remove tabs)
2016-03-31 17:24:24 +02:00
ccb5ed5e71
ssh_filter_btrbk: allow "realpath" and "cat /proc/self/mounts" on targets
2016-03-31 17:24:24 +02:00
f01304df35
ssh_filter_btrbk: refactoring/hardening:
...
- switched to bash interpreter
- enable fine-grained (--source, --target, ...) capabilities by command-line options
- added "--restrict_path" command-line option
- added sudo flag
- added man-page
- print SSH_ORIGINAL_COMMAND in error message
2015-09-10 14:02:32 +02:00
bab8f1771b
ssh_filter_btrbk: no fail if either $LOGNAME or $SSH_CLIENT are not set; added log_cmd() function; use relative path for "logger" command; cosmetics
2015-07-08 18:08:19 +02:00
f8c64c4f27
ssh_filter_btrbk: fail if any command fails, or var is undefined
2015-07-08 18:02:21 +02:00
c23674fca8
btrbk: catch exact error from "btrfs subvolume show"; instruct user to fix ssh_filter_btrbk.sh if it rejected the ssh command
2015-05-19 18:22:55 +02:00
bea010dce0
btrbk, ssh_filter_btrbk.sh: set PATH=/sbin:/bin:/usr/sbin:/usr/bin and call "btrfs" instead of using absolute "/sbin/btrfs". for compatibility with all distros out there.
...
- debian jessie (stable): btrfs-tools-3.17-1.1: `/sbin/btrfs`
- debian sid (unstable): btrfs-tools-4.0-2: `/bin/btrfs`
- gentoo: sys-fs/btrfs-progs-4.0: `/sbin/btrfs`
- arch: btrfs-progs-4.0-2: `/usr/bin/btrfs`
2015-05-18 21:18:57 +02:00
34e7ad07ec
ssh_filter_btrbk: removed unneeded calls to btrfs-progs
2015-04-28 21:19:46 +02:00
60b2951916
ssh_filter_btrbk: added ssh_filter_btrbk.sh (ssh wrapper/filter script)
2015-02-09 11:42:44 +01:00
Axel Burri