On Fri, Jan 19, 2007 at 04:02:46PM +0100, Paul Bijnens wrote:
> On 2007-01-18 20:22, Jean-Francois Malouin wrote:
> > Hi,
> > 
> > Got this client (Amanda-2.5.1p2 same as server) for which a few DLEs
> > with includes don't work, ie the include debug files are empty and the
> > DLE backups nothing. Turns out that some dirs leading to the DLEs are
> > 700 to some user and so amanda can't stat below the
> > read-write-exec-user-only directory. First time I encounter this. I
> > though runtar being suid to root would not be affected by this...
> > 
> > DLE:
> >                                                        
> > gertrude concussion2_jenkai_05 
> > /export_raid02/data-concussion-concussion2/jenkai/McGill/analysis/fMRI/individuals
> >  {
> >     tar-bsdtcpauth-100
> >     include "./hockey"
> > }
> > 
> > In the diskpath ".../McGill/..." is 700 to some user:
> > 
> > # ls -ld /export_raid02/data-concussion-concussion2/jenkai/McGill
> > drwxr-----  4 jenkai ptitolab 35 Jan 16 13:30 
> > /export_raid02/data-concussion-concussion2/jenkai/McGill/
> > 
> > and the include is empty (after running amcheck):
> > 
> > ls -la 
> > /tmp/amanda-conf9/selfcheck.concussion2_jenkai_05.20070118135050.include
> > -rw-------  1 amanda disk 0 Jan 18 13:50 
> > /tmp/amanda-conf9/selfcheck.concussion2_jenkai_05.20070118135050.include
> > 
> > If I make that dir 755 (say) all is good and the include debug file
> > shows "./hockey" as it should. 
> > 
> > Is this the expected behaviour?
> 
> expected and documented  :-)
> 
> >From the amanda.conf man page:
> 
> 
>     include [ list|file ][[optional][ append ][  string ]+]
>           ...
>           Note
>           For globbing to work at all, even the limited single
>           level, the top level directory of the DLE must be readable
>         by the Amanda user
> 

Does the man page description need a bit of touch up?

Jean-Francois was not using "globbing" (no metachars) but simply "./hockey".
So it appears the entire include mechanism does not work unless the
directories are readable.  Also, I suspect that execute permission is
needed as well.

-- 
Jon H. LaBadie                  jon AT jgcomp DOT com
 JG Computing
 4455 Province Line Road        (609) 252-0159
 Princeton, NJ  08540-4322      (609) 683-7220 (fax)