BackupPC-users

Re: [BackupPC-users] security & web server questions

2013-06-30 13:51:09
Subject: Re: [BackupPC-users] security & web server questions
From: Les Mikesell <lesmikesell AT gmail DOT com>
To: "General list for user discussion, questions and support" <backuppc-users AT lists.sourceforge DOT net>
Date: Sun, 30 Jun 2013 12:49:26 -0500
On Sun, Jun 30, 2013 at 12:24 PM, Grant <emailgrant AT gmail DOT com> wrote:
>>> On Linux, how is communication between the clients and the backup
>>> server achieved as far as security?  Does the backup server pull or do
>>> the clients push and as which user?
>>
>> This depends on the transfer method:
>>  - tar and rsync tunnel their data over ssh -> secure.
>
> I would use this.
>
>> And as reading the basic docs of backuppc tell you, the server pulls
>> the changes from the clients automatically or when told via the
>> web-interface.
>
> Does that mean the server has root read access to the entire
> filesystem of each of the clients via SSH keys?

And usually write access as well.  Some people use a different login
on the clients adding sudo with restrictions on the command that can
be run as root.  You can also use restrictions with an ssh key for
some control over the allowed commands, but you can't really get
around the need to read anything you want to back up and to write if
you want to restore.

-- 
   Les Mikesell
      lesmikesell AT gmail DOT com

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/