>>>>> "Jon" == Jon LaBadie <jon AT jgcomp DOT com> writes:

    Jon> Is your runtar (and several other amanda programs) set-uid'ed
    Jon> root?

-rwsr-x---    1 root     backup      50972 Feb 19 16:57 runtar

among others. It seems amanda is properly installed, as far as
setuid's are concerned.

--------------------------------------------------

I've been examining the /tmp/amanda files, which seem to provile tons
of interesting debug info. 20050512 was the latest date level 0
backups were performed for the /var/spool/imap/user.

$ grep -l var/spool/imap *20050512*
[a subset of files, hopefuly containing relevant information]

The file runtar.20050512043718.debug contains:

runtar: debug 1 pid 17395 ruid 92 euid 0: start at Thu May 12 04:37:18 2005
/bin/tar: version 2.4.4p4
running: /bin/tar: /bin/tar --create --file /dev/null --directory 
/var/spool/imap/user --one-file-system --listed-incremental 
/usr/local/amanda/var/amanda/gnutar-lists/omni_var_spool_imap_user_ag_0.new 
--sparse --ignore-failed-read --totals --files-from 
/tmp/amanda/sendsize._var_spool_imap_user_ag.20050512043718.include

The file sendsize._var_spool_imap_user_ag.20050512043718.include is
empty (zero bytes).

This suggests this latter file is not created by runtar (as root), but
rather by amanda; besides:

-rw-------    1 amanda   backup          0 May 12 04:37 
/tmp/amanda/sendsize._var_spool_imap_user_ag.20050512043718.include

Meaning that amanda user maybe requires read access to the base
directory, in order to be able to build the include file.

I'll change the permissions of /var/spool/imap/user (as well as parent
directories) for chmod og+xr and try a amdump right now. I'll post the
results after it.

Cheers,

Rodrigo


-- 

*** Rodrigo Martins de Matos Ventura <yoda AT isr.ist.utl DOT pt>
***  Web page: http://www.isr.ist.utl.pt/~yoda
***   Teaching Assistant and PhD Student at ISR:
***    Instituto de Sistemas e Robotica, Polo de Lisboa
***     Instituto Superior Tecnico, Lisboa, PORTUGAL
*** PGP fingerprint = 0119 AD13 9EEE 264A 3F10  31D3 89B3 C6C4 60C6 4585