Re: [Bacula-users] Don't run as root if you can avoid it.

2006-01-23 Thread Dan Langille
On 23 Jan 2006 at 8:45, Ralf Gross wrote: > I think I'll let bacula-sd run as bacula:tape, thus I can leave the > debian default permissions as they are. FYI, that is what FreeBSD does: bacula-fd -u root -g wheel bacula-sd -u bacula -g operator bacula-dir -u bacula -g bacula $ ls -l /dev/sa0 cr

Re: [Bacula-users] Don't run as root if you can avoid it.

2006-01-22 Thread Ralf Gross
Martin Simmons schrieb: > > On Fri, 20 Jan 2006 17:31:01 +0100, Ralf Gross <[EMAIL PROTECTED]> said: > > [access on /dev/sg3 as user/group bacula:bacula|tape] > > A process has a set of groups, which can be a different set from those > associated with a user. The "su" command (or however you b

Re: [Bacula-users] Don't run as root if you can avoid it.

2006-01-20 Thread Martin Simmons
> On Fri, 20 Jan 2006 17:31:01 +0100, Ralf Gross <[EMAIL PROTECTED]> said: > Russell Howe schrieb: > > James P. Kinney III wrote: > > > bacula is a member of the disk group. > > > > Isn't being a member of the disk group effectively the same as being > > root, since you can gain access to the

Re: [Bacula-users] Don't run as root if you can avoid it.

2006-01-20 Thread Ralf Gross
Russell Howe schrieb: > James P. Kinney III wrote: > > bacula is a member of the disk group. > > Isn't being a member of the disk group effectively the same as being > root, since you can gain access to the block devices containing the > local filesystems? I discovered a similar problem today wit

Re: [Bacula-users] Don't run as root if you can avoid it.

2006-01-16 Thread Russell Howe
James P. Kinney III wrote: > bacula is a member of the disk group. Isn't being a member of the disk group effectively the same as being root, since you can gain access to the block devices containing the local filesystems? -- Russell Howe [EMAIL PROTECTED] -

Re: [Bacula-users] Don't run as root if you can avoid it.

2006-01-15 Thread James P. Kinney III
On Sun, 2006-01-15 at 10:25 +0100, Kern Sibbald wrote: > I think you can do things much more simply by using groups and possibly > tweaking udev, then you won't need to change things back and forth. > Personally, I took a big hammer to my udev for both the tape drive and the > control channel.

Re: [Bacula-users] Don't run as root if you can avoid it.

2006-01-15 Thread Kern Sibbald
On Sunday 15 January 2006 04:31, James P. Kinney III wrote: > On Sat, 2006-01-14 at 18:07 -0500, Dan Langille wrote: > > On 14 Jan 2006 at 18:00, James P. Kinney III wrote: > > > On Sat, 2006-01-14 at 19:20 +0100, Kern Sibbald wrote: > > > > On Saturday 14 January 2006 18:14, James P. Kinney III wr

Re: [Bacula-users] Don't run as root if you can avoid it.

2006-01-14 Thread James P. Kinney III
On Sat, 2006-01-14 at 18:07 -0500, Dan Langille wrote: > On 14 Jan 2006 at 18:00, James P. Kinney III wrote: > > > On Sat, 2006-01-14 at 19:20 +0100, Kern Sibbald wrote: > > > On Saturday 14 January 2006 18:14, James P. Kinney III wrote: > > > > On Sat, 2006-01-14 at 15:31 +0100, Kern Sibbald wrot

[Bacula-users] Don't run as root if you can avoid it.

2006-01-14 Thread Dan Langille
On 14 Jan 2006 at 18:00, James P. Kinney III wrote: > On Sat, 2006-01-14 at 19:20 +0100, Kern Sibbald wrote: > > On Saturday 14 January 2006 18:14, James P. Kinney III wrote: > > > On Sat, 2006-01-14 at 15:31 +0100, Kern Sibbald wrote: > > > > > So it looks like the mtx-changer is not being touche