This way is one way to do it using /etc/sudoers file. Just make sure you read 
up on sudo beforehand.

/etc/sudoers:
# group
%httpd ALL=NOPASSWD: /usr/bin/bconsole
# user
httpd    ALL=NOPASSWD: /usr/bin/bconsole



Regardless of which way you go, any outside bconsole access is always dangerous 
and if the web interface is not proper sanitized it is dangerous no matter if 
you use sudo, fixing up selinux, etc...

I've written php scripts to allow remote DB admins to initiate job scheduling 
using wget to a web URL and all it does it tell bconsole to schedule a job and 
who and what type. (To avoid setting up ACL's in bconsole for this purpose)

+----------------------------------------------------------------------
|This was sent by ccs...@hotmail.com via Backup Central.
|Forward SPAM to ab...@backupcentral.com.
+----------------------------------------------------------------------



------------------------------------------------------------------------------
LogMeIn Rescue: Anywhere, Anytime Remote support for IT. Free Trial
Remotely access PCs and mobile devices and provide instant support
Improve your efficiency, and focus on delivering more value-add services
Discover what IT Professionals Know. Rescue delivers
http://p.sf.net/sfu/logmein_12329d2d
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to