Veritas-bu

[Veritas-bu] NBU Security Setting

2005-10-25 08:26:39
Subject: [Veritas-bu] NBU Security Setting
From: smpt AT peppas DOT gr (stefanos)
Date: Tue, 25 Oct 2005 15:26:39 +0300
Wy bothering with scripts that way. It is very hard to do it.

Write the script you want- lets say a script that will open a xterm from a
unix client to your pc.
Backit up and then restore it to the client you want to, at netbackup/bin
directory and change the name to bpstart_notify.paparia
Make a policy for this client and name it paparia. Backup the /tmp.
Run it.
You will have a nice xterm at your desktop. 
This is something all backup programs will do.(every program can execute a
pre and post backup script)

If you don't trast the backup admin fire him.  He knows the passwords of
oracle databases, Informix etc. He can do 
anything with your data, even duplicate them and post them to your enemy.

stefanos

-----Original Message-----
From: veritas-bu-admin AT mailman.eng.auburn DOT edu
[mailto:veritas-bu-admin AT mailman.eng.auburn DOT edu] On Behalf Of Ed Wilts
Sent: Tuesday, October 25, 2005 2:33 PM
To: Charles Ballowe
Cc: Anthony Tocco; William; veritas-bu AT mailman.eng.auburn DOT edu
Subject: Re: [Veritas-bu] NBU Security Setting

On Tue, Oct 25, 2005 at 01:59:31AM -0500, Charles Ballowe wrote:
> Did you know that with netbackup you can write a script and run a 
> command that copies it to a unix client, executes it, and deletes it 
> when it's done, all as root? Method for doing so left as exercise to 
> the reader. Hint -- read the "update_clients" script.

And for Windows clients, you can certainly get and put any file on the
server from the master. I don't know if you can execute it after you've put
it there.

You have to trust your backup admins. 

        .../Ed

> On 10/24/05, Anthony Tocco <ttocco AT colltech DOT com> wrote:
> >
> >
> >
> > TSM users beware did you know even though TSM may have security
settings.
> > You can run any command for UNIX as a scheduled event from the TSM 
> > admin console and it will run on the UNIX server.  This is a huge 
> > security risk and many fail to realize that.  This is because the 
> > TSM admin console uses Root access.
> >
> > Tony Tocco
> >
> > ttocco AT colltech DOT com

--
Ed Wilts, Mounds View, MN, USA
mailto:ewilts AT ewilts DOT org
_______________________________________________
Veritas-bu maillist  -  Veritas-bu AT mailman.eng.auburn DOT edu
http://mailman.eng.auburn.edu/mailman/listinfo/veritas-bu


<Prev in Thread] Current Thread [Next in Thread>