BackupPC-users

Re: [BackupPC-users] securing ssh keys on backuppc server

2016-07-30 03:10:40
Subject: Re: [BackupPC-users] securing ssh keys on backuppc server
From: Falko Trojahn <news AT trojahn DOT de>
To: backuppc-users AT lists.sourceforge DOT net
Date: Sat, 30 Jul 2016 09:09:47 +0200
lanceh1412-business AT yahoo.co DOT uk schrieb am 28.07.2016 um 16:01:
> I'll have a go at that. It looks like it'll make work harder for the enemy!
>
>

Here's another possibility
https://sdeziel.info/backuppc/index.html

I mean the restriction per wrapper script and/or ip within 
.ssh/authorized_keys:

command="/usr/local/bin/backuppc-wrapper",from="172.24.30.64,2607:f2c0:f00e:794a::64",no-agent-forwarding,no-port-forwarding,no-user-rc,no-X11-forwarding
 
ssh-rsa ....

Using this wrapper, only backup is possible - no restore.

Falko

------------------------------------------------------------------------------
_______________________________________________
BackupPC-users mailing list
BackupPC-users AT lists.sourceforge DOT net
List:    https://lists.sourceforge.net/lists/listinfo/backuppc-users
Wiki:    http://backuppc.wiki.sourceforge.net
Project: http://backuppc.sourceforge.net/