Bacula-users

Re: [Bacula-users] Can't run bacula any more.

2017-03-06 09:22:48
Subject: Re: [Bacula-users] Can't run bacula any more.
From: "Erik P. Olsen" <epodata AT gmail DOT com>
To: bacula-users AT lists.sourceforge DOT net
Date: Mon, 6 Mar 2017 15:21:56 +0100
On 2017-03-06 at 13:59:50 Simone Caronni wrote:

> There are super short tutorials inside the bacula-common package that
> you can use to bring up a quick installation with a client, director
> and storage daemons:
> 
> $ rpm -qd bacula-common
> /usr/share/doc/bacula-common/README.Redhat
> /usr/share/doc/bacula-common/quickstart_mysql.txt
> /usr/share/doc/bacula-common/quickstart_postgresql.txt
> /usr/share/doc/bacula-common/quickstart_sqlite3.txt
> 
> You can even do copy/paste and it will just work. Inside there is
> also the library switching for the director backend through
> update-alternatives.
> 
> There is no need to disable SELinux, the Bacula daemon has policies
> for all the daemons, behaviours and file system contexts since many
> years now:
> 
> # semanage fcontext -l | grep bacula
> /bacula(/.*)?                                      all files
>  system_u:object_r:bacula_store_t:s0
> /etc/bacula.*                                      all files
>  system_u:object_r:bacula_etc_t:s0
> /etc/rc\.d/init\.d/bacula.*                        regular file
> system_u:object_r:bacula_initrc_exec_t:s0
> /usr/sbin/bacula.*                                 regular file
> system_u:object_r:bacula_exec_t:s0
> /usr/sbin/bat                                      regular file
> system_u:object_r:bacula_admin_exec_t:s0
> /usr/sbin/bconsole                                 regular file
> system_u:object_r:bacula_admin_exec_t:s0
> /var/bacula(/.*)?                                  all files
>  system_u:object_r:bacula_store_t:s0
> /var/lib/bacula.*                                  all files
>  system_u:object_r:bacula_var_lib_t:s0
> /var/log/bacula.*                                  all files
>  system_u:object_r:bacula_log_t:s0
> /var/run/bacula.*                                  regular file
> system_u:object_r:bacula_var_run_t:s0
> /var/spool/bacula.*                                all files
>  system_u:object_r:bacula_spool_t:s0
> /var/spool/bacula/log(/.*)?                        all files
>  system_u:object_r:var_log_t:s0
> 
> There is no need to turn off SELinux and is actually not recommended.
> Much like turning off your firewall and enabling password-less
> logins. If SELinux is denying you something because you used
> non-standard RHEL/Fedora locations, just add the appropriate contexts
> to your system (semanage fcontext -a).

Thanks Simone,

I'll look into all your advice as soon as possible. I've gone back to
do backups with my old retired machine since I can't be without backups
too long, so I'll wait till the coming weekend to work again on the
problem.

And I'll not touch my selinux setup. If a programme doesn't work with
selinux it won't be installed on my system.

--
Regards,
Erik P. Olsen, M.Sc. EE
Solsortvej 30
DK-2000 Frederiksberg
Denmark

------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, SlashDot.org! http://sdm.link/slashdot
_______________________________________________
Bacula-users mailing list
Bacula-users AT lists.sourceforge DOT net
https://lists.sourceforge.net/lists/listinfo/bacula-users