Bacula-users

[Bacula-users] Linux: backup and restore of file capabilities ?

2012-01-01 16:19:52
Subject: [Bacula-users] Linux: backup and restore of file capabilities ?
From: Wolfgang Denk <wd AT denx DOT de>
To: bacula-users AT lists.sourceforge DOT net
Date: Sun, 01 Jan 2012 21:58:01 +0100
A number of tools in recent Linux distributions (say, Fedora 16) rely
on file capabilities for correct operation.  For example, "rlogin"
willonly work for regular uses when the "cap_net_bind_service"
capability is set:

        -> getcap -v /usr/bin/rlogin
        /usr/bin/rlogin = cap_net_bind_service+ep

Without this capability, non-root users will only get:

        -> rlogin <name>
        rcmd: socket: Permission denied

It appears that bacula does not save, and thus cannot restore, such
file capabilities.

The result is that any restore of a root file system will have a
(usually unknown) number of files that don't work correctly any more.


I searched the mailing list archives and the documentation, but could
not find any reference to dealing with file capabilities.  Am I
missing something?

Is there a way to perform "correct" backups under Linux, i. e. to
backup and be able to restore things like ACLs and especially file
capabilities?

If not, are there any plans to add such a feature?


Note that this is probably a bigger problem - it appears that
neither cpio nor tar nor rsync etc. can deal with file capabilities.
At the moment I don't know how to create a 100% correct backup of a
plain vanilla Linux root filesystem... :-( 


Happy new year, btw...


Wolfgang Denk

-- 
DENX Software Engineering GmbH,     MD: Wolfgang Denk & Detlev Zundel
HRB 165235 Munich, Office: Kirchenstr.5, D-82194 Groebenzell, Germany
Phone: (+49)-8142-66989-10 Fax: (+49)-8142-66989-80 Email: wd AT denx DOT de
"I can call spirits from the vasty deep."
"Why so can I, or so can any man; but will they come when you do call
for them?"          - Shakespeare, 1 King Henry IV, Act III, Scene I.

------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual 
desktops for less than the cost of PCs and save 60% on VDI infrastructure 
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users