Veritas-bu

[Veritas-bu] Restricting *master server* from restores

2004-11-04 17:36:42
Subject: [Veritas-bu] Restricting *master server* from restores
From: thoke AT northpeak DOT com (Tim Hoke)
Date: Thu, 4 Nov 2004 16:36:42 -0600 (CST)
Add DISALLOW_SERVER_FILE_WRITES to the client's bp.conf file....

See the NBU SAG for more details.

-Tim

On Thu, 4 Nov 2004 Mark.Donaldson AT cexp DOT com wrote:

> I have an odd request from our security folks.  They'd like to restrict
> restores for a particular client to allow only the client to be able request
> a restore.  
> 
> If the NB master server is compromised, they'd don't want the evil-doer to
> be able to overwrite the secured server.  
> 
> My reading shows that I can forbid a client from requesting restore jobs
> (via bp.conf and/or bpclient options) but, it seems, a master server is
> named this way for a reason.
> 
> Anybody have a method?
> 
> -M
> 
> =================================================
>   There are 10 kinds of people in the world,
>   those that know binary, and those that don't.
> =================================================
>   Mark Donaldson - SA - Corporate Express
> =================================================
> _______________________________________________
> Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
> http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu
> 


<Prev in Thread] Current Thread [Next in Thread>