From a67561eaafa004803b1f5c824898bba88a25412e Mon Sep 17 00:00:00 2001
From: Peter Palfrader <peter@palfrader.org>
Date: Sat, 19 Jul 2014 12:57:14 +0200
Subject: [PATCH] restrict security-master's rsync for the archive

---
 modules/roles/files/security_master/rsyncd.conf | 1 +
 1 file changed, 1 insertion(+)

diff --git a/modules/roles/files/security_master/rsyncd.conf b/modules/roles/files/security_master/rsyncd.conf
index 34e002825..1049ea6ec 100644
--- a/modules/roles/files/security_master/rsyncd.conf
+++ b/modules/roles/files/security_master/rsyncd.conf
@@ -10,6 +10,7 @@ log file = /var/log/rsyncd/rsyncd.log
   path = /srv/security.debian.org/archive/debian-security/
   comment = Debian security archive
   read only = true
+  secrets file = /etc/rsyncd/exports.secrets
   list = no
 
 [exports]
-- 
2.20.1