I'm currently pushing backups from each system to a central backup
server via rdiff-backup.  However, I realized that push backups are
not safe because if one of the systems is compromised, the infiltrator
could delete all of that system's backups with a command like this:

rdiff-backup --remove-older-than 1s [email protected]::/path/to/backup

Pull backups don't seem secure because if the central server is
compromised, the infiltrator would have root read privileges on every
backed-up system and would thereby be able to gain root access to
those systems.

I don't have a clear understanding of how bacula works yet.  Can
anyone tell me if it has these vulnerabilities (or others)?

- Grant

------------------------------------------------------------------------------
This SF.net email is sponsored by Windows:

Build for Windows Store.

http://p.sf.net/sfu/windows-dev2dev
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users