Re: [Bacula-users] Fwd: Re: Bacula massive security impact on network

2015-12-18 Thread H. Steuer
On 18.12.2015 18:01, Phil Stracchino wrote: > On 12/18/15 11:56, Kern Sibbald wrote: >> Hello, >> >> If you have hundreds of users with root access and they can access the >> Bacula Director machine as root, you have a far bigger security problem >> than just Bacula, since they can do anything to y

Re: [Bacula-users] Fwd: Re: Bacula massive security impact on network

2015-12-18 Thread H. Steuer
sure when you fully understand Bacula's security and > apply "normal" *nix security (sudo, ...) on top of it, you will have a > secure backup system. > > Best regards, > Kern > > On 12/18/2015 05:34 PM, H. Steuer wrote: >> >> Hello Bill, >> >> you

[Bacula-users] Fwd: Re: Bacula massive security impact on network

2015-12-18 Thread H. Steuer
fd.conf Director section which then grants you administrative privileges in the director. Thanks for your support so far, let me know your thoughts Cheers, Heri On 18.12.2015 17:19, Bill Arlofski wrote: > On 12/18/2015 10:30 AM, H. Steuer wrote: >> Hello Bill, >> >> t

Re: [Bacula-users] Bacula massive security impact on network

2015-12-18 Thread H. Steuer
anual. HOWEVER: In a network with "hundreds of hosts", you really should be taking enterprise support and not trying to cut corners by using the community version. On 18/12/15 13:36, H. Steuer wrote: Hello, our current understanding of the bacula security model is, that it is not poss

[Bacula-users] Bacula massive security impact on network

2015-12-18 Thread H. Steuer
Hello, our current understanding of the bacula security model is, that it is not possible to disable the anonymous aka default console. This leads to the fact that all users having root access to one of the clients does have access to all data that was backed up by bacula. In a network with hundre