This issue came up on IRC yesterday.  The statement in question is at 
http://www.bacula.org/rel-manual/Bacula_Security_Issues.html :

"The Clients (bacula-fd) must run as root to be able to access all 
the system files."

Someone wanted to run FD as non-root. I replied that would be fine 
provided the UID/GID has permission to access all the files you want 
to backup.  I propose to replace the quoted sentence with:

"The Clients (bacula-fd) must run as whatever GID/UID is necessary to 
access whatever files you wish to backup. In addition, if you wish to 
restore over existing files, bacula-fd will require sufficient 
permission to do that.  In most cases, this means root."

Comments?
-- 
Dan Langille : Software Developer looking for work
my resume: http://www.freebsddiary.org/dan_langille.php
PGCon - The PostgreSQL Conference - http://www.pgcon.org/



-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to