This may seem silly, but isn't the point of asking an rsync server for files to 
create that you trust the server to tell you what files to ...

Wait, are you saying that the client will ignore the subtree that it thinks it 
is traversing?
That the client does not sanity check the path it gets from the server?

"Never trust your client" just became "never trust your server" :-).

But it brings up an interesting question. Do servers also accept any filename 
from the client?
-- 
Please use reply-all for most replies to avoid omitting the mailing list.
To unsubscribe or change options: https://lists.samba.org/mailman/listinfo/rsync
Before posting, read: http://www.catb.org/~esr/faqs/smart-questions.html

Reply via email to