Amanda-Users

Re: Permission denyed to just some filesystems

2005-12-26 08:59:08
Subject: Re: Permission denyed to just some filesystems
From: Thomas Widhalm <widhalmt AT unix.sbg.ac DOT at>
To: amanda-users AT amanda DOT org
Date: Mon, 26 Dec 2005 14:37:41 +0100
Am Montag, 26. Dezember 2005 03:39 schrieb Jon LaBadie:
> On Mon, Dec 26, 2005 at 12:22:36AM +0100, Thomas Widhalm wrote:
> > Am Sonntag, 25. Dezember 2005 23:57 schrieb Jon LaBadie:
> > > On Sun, Dec 25, 2005 at 11:04:30PM +0100, Thomas Widhalm wrote:
> > > > Hi!
> > > >
> > > > I set up amanda to backup some of my workstations. Now I encountered
> > > > some strange issue: On one workstation amanda can backup /home but
> > > > not /. The permissions in /dev are the same. The user amanda is in
> > > > the disk group.
> > >
> > > What backup program are you using.  For tar the device permissions
> > > should not matter.  For dump they do.
> >
> > I have the option "program "GNUTAR" set.
> >
> > > Are the entries in /dev symlinks to some other file, the actual device?
> > > On some OSs they are.  Does "ls -lL" (both lower and upper 'ell') of
> > > the devices give the same results as "ls -l"?
> >
> > Both ls's on the /dev/hda device and on the / directory show the same
> > output.
> >
> > Thanks for the hint but it didn't work out.
>
> You over looked this comment I made.

Sorry. I just wanted to exclude any possible reason for this error.

>
> > >  For tar the device permissions should not matter.
>
> So I would not have expected anything else.
>
> For clarification, tar does not read the devices directly, dump does.
> Tar reads each and every individual file and directory.  Thus some of
> amanda's programs must be owned by root and setuid.  Not every program,
> just certain ones, including, but not limited to, the "runtar" program.

runtar and some other programs under /usr/lib/amanda belong to root:disk with 
suid set. They have read and execute for the group set.

>
> Even this may not be sufficient.  For example, if you are backing up
> remote mounted directories (nfs ...) root's privilege may be turned off.
> Or if you are running trusted solaris or other "secure" unix (eg. selinux),
> root may not have "all power".

I want to backup / and /home. Both are not nfs mounted, both are ext3 and 
selinux is off. It's Tao Linux 4 (rebuild of RHEL 4). All works fine on any 
other workstation. I just can't get / to get accessed by amanda. /home is no 
problem. This is what I don't understand. I searched for differences between 
those to devices rather long, but I didn't find any.

Maybe you have some more hints.

Thank you.

Regards,
Thomas

>
> >>> End of included message <<<

-- 
*****************************************************************
* Thomas Widhalm                             Unix Administrator *
* University of Salzburg                     IT- Services (ITS) *
* Systems Management                               Unix Systems *
* Hellbrunnerstr. 34                     5020 Salzburg, Austria *
* widhalmt AT unix.sbg.ac DOT at                     +43/662/8044-6774 *
* gpg: 6265BAE6                                                 *
* http://www.sbg.ac.at/zid/organisation/mitarbeiter/widhalm.htm *
*****************************************************************

Attachment: pgp9hzg7cCjzt.pgp
Description: PGP signature