Bacula-users

Re: [Bacula-users] Linux: backup and restore of file capabilities ?

2012-01-09 14:58:22
Subject: Re: [Bacula-users] Linux: backup and restore of file capabilities ?
From: Marco van Wieringen <mvw AT planets.elm DOT net>
To: bacula-users AT lists.sourceforge DOT net
Date: Mon, 9 Jan 2012 19:56:01 +0000 (UTC)
Geert Stappers <Geert.Stappers <at> vanadgroup.com> writes:

> 
> Op 20120104 om 09:17 schreef Marco van Wieringen:
> > On 01/ 4/12 12:03 AM, Wolfgang Denk wrote:
>        <snip/>
> > >
> > > I understand the problem is located, and no further testing on my side
> > > is needed?
> > >
> > >
> > Correct I see what is causing this problem. I only need to code a workaround
> > and test it so that will take some time to do it right. As I expected 
> > the current
> > extended attribute code is sufficient perform the backup and restore no
> > need to implement yet an other interface.
> > 
> > I installed a Fedora 16 VM and can now test on that.
> 
> As I read http://bugs.bacula.org/view.php?id=1807 is bug #1807 fixed.
> 
Correct I tested this on fedora16 with backing up the ping binary and
restoring it. After the restore now the extended attribute is put
back and the posix capability is visible in both the attr -l and
ls output. Using the restored binary also works as a normal user
so that is enough proof for me that it works.

So you need to enable xattrsupport=yes and then posix file capabilities
are saved. On restore the posix file capabilities are restored on the
files being restored.

This is done using a so called delayed restore of both the ACL and XATTR
streams by the bacula filed on restore. This new implementation also
fixes the acl restore on AIX (which also got clobbered by the chmod
and chown done by the filed after it extracted all file data.) And Solaris
without the proper acl setting on for instance zfs would clobber its
acls on restore.

As the bug report shows its put back for the 5.2.4 release. So when that
is released the patches will be part of that. I fixed quite some other
problems with xattr and acls on both Solaris and AIX this week which were
triggered by a more extended regression test which showed problems on
the Solaris platform. And some AIX problems which were reported here
on the user list after working with the reporter on it today we found
the problem and fixed it for the future.

All bugs are traceable via the bugs site and have gotten separate ids
and have been closed as of today.

Marco


------------------------------------------------------------------------------
Ridiculously easy VDI. With Citrix VDI-in-a-Box, you don't need a complex
infrastructure or vast IT resources to deliver seamless, secure access to
virtual desktops. With this all-in-one solution, easily deploy virtual 
desktops for less than the cost of PCs and save 60% on VDI infrastructure 
costs. Try it free! http://p.sf.net/sfu/Citrix-VDIinabox
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users