Re: backups: best privilege policy

2006-08-15 Thread Alan Pearson
I presume root is need for tar, as it need file permissions ? of course, but I don't really consider that a proper backup technique Please elaborate on this.

Re: backups: best privilege policy

2006-08-14 Thread Alan Pearson
On 14 Aug 2006, at 20:37, Henning Brauer wrote: there an established method for keeping privileges lower when doing dumps, i.e. add a user who can dump and not using root to do this? you don't need root to do backups, a member of group operator is sufficient. we add a special backup user

Re: backups: best privilege policy

2006-08-14 Thread Jon LaBadie
On Mon, Aug 14, 2006 at 09:06:19PM +0100, Alan Pearson wrote: On 14 Aug 2006, at 20:37, Henning Brauer wrote: there an established method for keeping privileges lower when doing dumps, i.e. add a user who can dump and not using root to do this? you don't need root to do backups, a

Re: backups: best privilege policy

2006-08-14 Thread Alan Pearson
I presume root is need for tar, as it need file permissions ? On the client a compiled, wrapper program, runtar is used to call tar. runtar is installed owned by root and setuid'ed. Ah, thanks Jon !