Amanda-Users

Re: Odd permissions problem

2005-12-14 11:11:58
Subject: Re: Odd permissions problem
From: Dave Ewart <davee AT ceu.ox.ac DOT uk>
To: AMANDA Users <amanda-users AT amanda DOT org>
Date: Wed, 14 Dec 2005 16:01:06 +0000
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Wednesday, 14.12.2005 at 16:17 +0100, Paul Bijnens wrote:

> Dave Ewart wrote:
> >I've just added a few entries to my disklist and am getting errors like
> >the following, during amcheck:
> >
> >    ERROR: athena: [could not access /srv/samba/netlogon
> >    (/srv/samba/netlogon): Permission denied]
> 
> 
> >Why is this directory not visible to the AMANDA process, given that the
> >AMANDA user is part of group 'disk' and that should give it access to
> >those partitions?  The '/root/' partition is only (technically) visible
> >to the root user, yet AMANDA is able to correctly back this up.
> 
> http://wiki.zmanda.com/index.php/Why_does_amcheck_fail_while_amdump_succeeds_%3F
> 
> The good news is that amdump will probably work fine.
> 
> The fact that amanda is part of group disk has no effect here:
> you're doing backups of subdirectories, and thus cannot use dump, but
> must use gnutar (Dump can only work on whole partitions, not on 
> subdirectories, at least when doing incrementals.)
> 
> For running dumpa and accessing the device-partitions, amanda needs to
> be member of the disk-group, but for running gnutar, amanda actually
> needs root priviledges, which she gets by invoking gnutar with a suid
> root program, which is not used by amcheck. (Note amcheck just sends a
> message to amandad on the client, and it's amandad on the client that
> does the check; hence making amcheck suid-root does not help either.)

Ah, understood, very helpful Paul.  That explains the situation
sufficiently for me to be able to work around it.

Thanks,

Dave.
- -- 
Dave Ewart
davee AT ceu.ox.ac DOT uk
Computing Manager, Cancer Epidemiology Unit
Cancer Research UK / Oxford University
PGP: CC70 1883 BD92 E665 B840 118B 6E94 2CFD 694D E370
Get key from http://www.ceu.ox.ac.uk/~davee/davee-ceu-ox-ac-uk.asc
N 51.7518, W 1.2016
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2 (GNU/Linux)

iD8DBQFDoEHCbpQs/WlN43ARAnN9AJ92UXOBw630FlSImG9C3fJpHhv2+ACgy4mi
yACzRR4yhXZxUooRO9dOk98=
=cho+
-----END PGP SIGNATURE-----

<Prev in Thread] Current Thread [Next in Thread>