From 6b62225d74e645c50425bd651b143f241e2591bb Mon Sep 17 00:00:00 2001 From: Thomas McWork Date: Tue, 24 Jul 2018 13:58:14 +0200 Subject: [PATCH] remove potential SSH security issue MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit … by removing the hard coded SSH option to bypass `StrictHostKeyChecking` and the `UserKnownHostsFile`. Closes #104 --- rsync_tmbackup.sh | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/rsync_tmbackup.sh b/rsync_tmbackup.sh index a8723e7..9d04d74 100755 --- a/rsync_tmbackup.sh +++ b/rsync_tmbackup.sh @@ -444,7 +444,7 @@ while : ; do CMD="rsync" if [ -n "$SSH_CMD" ]; then - CMD="$CMD -e 'ssh -p $SSH_PORT -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null'" + CMD="$CMD -e 'ssh -p $SSH_PORT'" fi CMD="$CMD $RSYNC_FLAGS" CMD="$CMD --log-file '$LOG_FILE'"