>>>>> On Tue, 09 Jan 2007 16:52:41 -0500, Dan Langille said:
> 
> This issue came up on IRC yesterday.  The statement in question is at 
> http://www.bacula.org/rel-manual/Bacula_Security_Issues.html :
> 
> "The Clients (bacula-fd) must run as root to be able to access all 
> the system files."
> 
> Someone wanted to run FD as non-root. I replied that would be fine 
> provided the UID/GID has permission to access all the files you want 
> to backup.  I propose to replace the quoted sentence with:
> 
> "The Clients (bacula-fd) must run as whatever GID/UID is necessary to 
> access whatever files you wish to backup. In addition, if you wish to 
> restore over existing files, bacula-fd will require sufficient 
> permission to do that.  In most cases, this means root."
> 
> Comments?

Restore will also be limited for new files, always setting the owner to the
user that is running bacula-fd and similarly for the group.

__Martin

-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to