On Wed, Jan 5, 2022 at 6:53 AM Graham Sparks <g...@hotmail.co.uk> wrote:
> I've just checked the "Privacy" screen and I actually have "bacula-fd", > "bacula", "bconsole" AND "sh" in the Full Disk Access list. I probably > shouldn't have "sh" in that list. That might actually be worse than your > suggestion to run "csrutil disable" 😕. > > I suppose running "csrutil disable" as a 'Client Run Before Job' script, > then enabling again afterwards is an option, but I agree---after a certain > point it feels as though another solution may be simpler. > That won't work because "csrutil disable" can only be run in recovery mode. What I've decided to do is shift away from using bacula to back up macOS hosts and use Time Machine to a central Samba server instead. I lose some central manageability this way but it seems to be much more reliable, and avoids having to install Xcode and compile bacula-fd on the client, as well as keeping macOS's security features intact. A further benefit is I can do "bare metal" restores using the standard macOS installer and Migration Assistant. -- David Brodbeck (they/them) System Administrator, Department of Mathematics University of California, Santa Barbara
_______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
