BackupPC-users

Re: [BackupPC-users] security & web server questions

2013-06-30 15:55:34
Subject: Re: [BackupPC-users] security & web server questions
From: Grant <emailgrant AT gmail DOT com>
To: "General list for user discussion, questions and support" <backuppc-users AT lists.sourceforge DOT net>
Date: Sun, 30 Jun 2013 12:54:18 -0700
>>>> On Linux, how is communication between the clients and the backup
>>>> server achieved as far as security?  Does the backup server pull or do
>>>> the clients push and as which user?
>>>
>>> This depends on the transfer method:
>>>  - tar and rsync tunnel their data over ssh -> secure.
>>
>> I would use this.
>>
>>> And as reading the basic docs of backuppc tell you, the server pulls
>>> the changes from the clients automatically or when told via the
>>> web-interface.
>>
>> Does that mean the server has root read access to the entire
>> filesystem of each of the clients via SSH keys?
>
> And usually write access as well.  Some people use a different login
> on the clients adding sudo with restrictions on the command that can
> be run as root.  You can also use restrictions with an ssh key for
> some control over the allowed commands, but you can't really get
> around the need to read anything you want to back up and to write if
> you want to restore.

Could I create hard links in a particular directory for the files to
be backed up on the client and limit permissions for the backup server
to that directory?

- Grant

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/