This a note for Future John: Using filesystem capabilities with rsync by Hazel Smith. Use the CAP_DAC_READ_SEARCH capability. AKA: how I learned to stop worrying and love CAP_DAC_READ_SEARCH. There are some more notes over on Linux Capabilities and rsync, from presentation to practice.