On Monday 03 March 2008 08:46, David Boyes wrote:
> > Just to expand on this point a bit - as security enhancements such as
> > SELinux
> > become more commonplace, it's very realistic to expect that files that
>
> are
>
> > not
> > in directories indicated by security policy as holding executables
>
> simply
>
> > can't be run as programs.  If Bacula throws binary executables in
>
> places
>
> > outside of FHS, it runs a risk of being shot down by those security
> > policies.
>
> Well put. Regardless of how technically nice an alternative would be,
> it's automatically wrong if it's different from the standard. I don't
> much like FHS either -- it has some dumb decisions in it -- but we're
> stuck with it.

I believe another ramification to consider is the package management system in 
use on the server. I've run into serious problems when in the past I've 
contravened the package management system and placed application files 
manually. If Bacula is going to be packaged, the I feel that there is no 
choice but to following set down by the package management system. To do 
otherwise would cause chaos. The alternative is to provide no packages at all 
and force everyone to install from source into /usr/local or /opt.

As for restoring after a crash, with Debian it's simple. I do a net install of 
a minimally functioning system; install the Bacula Deb packages; and, then 
restore the database & configuration files. (I think, by definition, a "smart 
admin" will have backed up the critical Bacula components.) Then, proceed to 
rebuild the system.

HTH!

cmr

-- 
Debian 'Etch' - Registered Linux User #241964
--------
"More laws, less justice." -- Marcus Tullius Ciceroca, 42 BC

-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to