Sunday, January 11, 2009

missing piece in man rsync_selinux if your rsync path is hosted with nfs or autofs

man rsync_selinux mention that

chcon -t public_content_t /var/rsync

but this is not enough if you rsync module is hosted with autofs, you also have to

setsebool -P rsync_export_all_ro=1

otherwise you will get the error

rsync -avn ip::module

@ERROR: chroot failed
rsync error: error starting client-server protocol (code 5) at main.c(1296) [receiver=2.6.8]


cat /var/log/rsync.log

2009/01/11 16:21:24 [25856] rsync: chroot /path failed: Permission denied (13)