In the section about using sudo at
http://backuppc.sourceforge.net/faq/ssh.html
I would like to propose a change. In the advise on using a script, using
a script is less secure (don't know why, i was just told). And it is not
needed in this case.

The reason for using the script was to force the use of the "--server
--sender" arguments to the rsync command. Well sudo provides this on its
own, so setting the sudo config to 

 backuppc  ALL=NOPASSWD: /usr/bin/rsync --server --sender *

causes sudo to only accept the /usr/bin/rsync command with those
arguments, the '*' at the end tels sudo to accept more arguments after
-- sender, in my own case i added all the static arguments to the line,
just to be bothersome.

The same goes for the tar example.


-- 
Med venlig hilsen/mojn/regards
Martin Hansen
Center for Software Innovation
Stenager 2, DK-6400 Sønderborg, Web: www.cfsi.dk


_______________________________________________
BackupPC-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/backuppc-users
http://backuppc.sourceforge.net/

Reply via email to