> > implementation is there nothing what the administrator of FD can do to
> > prevent the administrator of Director to back up thw whole FD's computer
> > including the private directories.
> >
> 
> 
> Why not just run the FD as a non-root user and limit the directories allowed
> to be backed up using standard file permissions?

This is, of course, the first thing that spings to mind, but it is not
always easy to do so and besides, you cannot take read rights to some
system files like /etc/passwd and similar.

Another thing what comes to mind and is much better is to chroot FD to the
right directory, but problem arises when you do have more directories
across the filesystem to backup. Then you can use mount --bind in linux,
but it's getting a bit messy...

-- 
               The more I see, The less I believe...


-------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc. Do you grep through log files
for problems?  Stop!  Download the new AJAX search engine that makes
searching your log files as easy as surfing the  web.  DOWNLOAD SPLUNK!
http://ads.osdn.com/?ad_id=7637&alloc_id=16865&op=click
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to