X-Git-Url: https://git.adam-barratt.org.uk/?a=blobdiff_plain;f=modules%2Froles%2Ffiles%2Fssh_upload%2Frsync-ssh-wrap;h=bc2e2caa3a3a68934acc2f3d3b1aee9f39bb5533;hb=6849c0d133f88df75366cf25a663e52409eac389;hp=04ceb3e02f10c94bd61fe9e6272a8311ca6c49b5;hpb=1978f7d8a7d683db99b9b6256cda681dd42cec58;p=mirror%2Fdsa-puppet.git

diff --git a/modules/roles/files/ssh_upload/rsync-ssh-wrap b/modules/roles/files/ssh_upload/rsync-ssh-wrap
index 04ceb3e02..bc2e2caa3 100755
--- a/modules/roles/files/ssh_upload/rsync-ssh-wrap
+++ b/modules/roles/files/ssh_upload/rsync-ssh-wrap
@@ -26,7 +26,7 @@ set -e
 set -u
 
 MYLOGNAME="`basename "$0"`[$$]"
-RSYNCDIR="/srv/upload.debian.org/UploadQueue/"
+RSYNCDIRS=(/srv/upload.debian.org/UploadQueue/ /srv/security.upload.debian.org/SecurityUploadQueue/)
 
 usage() {
 	echo "local Usage: $0 <host>"
@@ -56,16 +56,20 @@ do_rsync() {
 	local allowed_rsyncs
 	allowed_rsyncs=()
 
-	if [ -d "$RSYNCDIR" ]; then
-		allowed_rsyncs+=("--server -vlogDtprxze.iLsf --partial . $RSYNCDIR") # wheezy
-		allowed_rsyncs+=("--server -vlogDtprxze.iLsfx --partial . $RSYNCDIR") # jessie
-		allowed_rsyncs+=("--server -vlogDtprxze.iLsfxC --partial . $RSYNCDIR") # stretch
-	fi
+	local rsyncdir
+	for rsyncdir in "${RSYNCDIRS[@]}"; do
+		if [ -d "$rsyncdir" ]; then
+			allowed_rsyncs+=("--server -vlogDtprxze.iLsf --partial . $rsyncdir") # wheezy
+			allowed_rsyncs+=("--server -vlogDtprxze.iLsfx --partial . $rsyncdir") # jessie
+			allowed_rsyncs+=("--server -vlogDtprxze.iLsfxC --partial . $rsyncdir") # stretch
+			allowed_rsyncs+=("--server -vtxze.LsfxC --partial . $rsyncdir") # buster
+		fi
+	done
 	for cmd_idx in ${!allowed_rsyncs[*]}; do
 		allowed="${allowed_rsyncs[$cmd_idx]}"
 		if [ "$*" = "$allowed" ]; then
 			info "Running for host $remote_host: rsync $*"
-			exec rsync "$@"
+			exec rsync --chmod=F640 "$@"
 			croak "Exec failed"
 		fi
 	done