Re: Abotu setting 'PermitRootLogin=no' in sshd_config

[Matěj Cepl]

On 2014-11-21, 10:55 GMT, Roberto Ragusa wrote:
> For rsync-as-root use cases my usual approach is to create 
> another account with userid=0 and login with ssh on this 
> account.

Proper way is actually to use command parameter in 
authorized_keys on server and for example 
https://ftp.samba.org/pub/unpacked/rsync/support/rrsync
(or /usr/share/doc/rsync-*/support/rrsync)

The only thing attacker gets after cracking to the server is 
rsync prompt.

Best,

Matěj