|
Re: [BackupPC-users] Quotas whith BackupPC
2008-07-09 09:47:26
1)Encrypted disk. The only reason to encrypt the backup volume is so that the files cannot be access if a drive is pulled or if someone tries to backdoor linux security by booting a livecd or something. Once the system is running, the excryption is already bypassed.
2)rsync has no ability to encrypt the transfer of data BUT you can easily tunnel rsync over ssh. cygwin has an ssh daemon that can be used to do this but you will have to use some public keys to make it all work without passwords. This is quite secure.
2b)alternatively, you can build a vpn on your backuppc server and have your windows clients connect to the VPN to provide a secure connection. You can turn off setting the gateway on the VPN so that it would affect other network traffic. This is not too difficult and is also very secure.
3)the password in .htpasswd is in a text file but is encrypted like the text /etc/passwd file. Good luck cracking it. Additionally, it can be changed to permissions 640 so that only backuppc and root can even read it.
On Wed, Jul 9, 2008 at 4:35 AM, Daniel Berteaud < daniel AT firewall-services DOT com> wrote:
If someone has access to your backup box, having password is useless
because he can directly access the backed up files.
Le mercredi 09 juillet 2008 à 10:29 +0000, nadia kheffache a écrit :
> hi Paul,
>
> I agree with you, but I think this is not prudent to have the
> passwords to clear stored in a file.
> But if we are ever attacked from the outside?
> I think the passwords in / etc / shadow / are not clear even to root?
> we trust our users, the administrator, so everything must be allowed
> to clear? NO.
> So, i dont have probleme with my Backuppc, because it installed in the
> private lan isolated, but, the hacker are very clever...
>
> Regards
> Nadia
>
--
Daniel Berteaud
FIREWALL-SERVICES SARL.
Société de Services en Logiciels Libres
Technopôle Montesquieu
33650 MARTILLAC
Tel : 05 56 64 15 32
Fax : 05 56 64 15 32
Mail: daniel AT Firewall-Services DOT com
Web : http://www.firewall-services.com
-------------------------------------------------------------------------
Sponsored by: SourceForge.net Community Choice Awards: VOTE NOW!
Studies have shown that voting for your favorite open source project,
along with a healthy diet, reduces your potential for chronic lameness
and boredom. Vote Now at http://www.sourceforge.net/community/cca08 _______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List: https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki: http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/
|
|
|
