I'm currently pushing backups from each system to a central backup server via rdiff-backup. However, I realized that push backups are not safe because if one of the systems is compromised, the infiltrator could delete all of that system's backups with a command like this:
rdiff-backup --remove-older-than 1s backup@12.34.56.78::/path/to/backup Pull backups don't seem secure because if the central server is compromised, the infiltrator would have root read privileges on every backed-up system and would thereby be able to gain root access to those systems. I don't have a clear understanding of how bacula works yet. Can anyone tell me if it has these vulnerabilities (or others)? - Grant ------------------------------------------------------------------------------ This SF.net email is sponsored by Windows: Build for Windows Store. http://p.sf.net/sfu/windows-dev2dev _______________________________________________ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
