SV: [Veritas-bu] Unadvertised utility in Netbackup

[Hampus Lind]

Title: Message

We have a lot of root people at all our shops.. L   Of course I got access to all the data that are controlled under netbackup, and with that can cause great damage. The question was more in terms of “is it logged somewhere”? I`am I really safe if something happens and people know I got this “feature”? I cant really proof that I did not use this command? What about bpinst, that are a far more powerful utility that allow you to execute scripts on any client server you which.   When it comes to SLA`s our units agree to backups and controlled restores, not to the possibility of undocumented programs that pretty much can do anything anytime without any logging on there servers.     MVH / Hampus Lind Rikspolisstyrelsen National Police Board Tel dir: +46 (0)8 - 401 99 43 Tel mob: +46 (0)70 - 217 92 66 E-mail: [EMAIL PROTECTED] -----Ursprungligt meddelande----- Från: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] För Paul Keating Skickat: den 6 februari 2006 20:58 Till: veritas-bu@mailman.eng.auburn.edu Ämne: RE: [Veritas-bu] Unadvertised utility in Netbackup   it's executable by root.   keep unauthorized root out of your box...sleep well at night.   yes, it's a security risk...yes, it can save your butt....yes, you can shoot yourself in the foot with it...you can even blow your whole leg off.   anything you can do with bpgp, you can do with a creative backup and restore.   Paul -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hampus Lind Sent: February 6, 2006 2:13 PM To: veritas-bu@mailman.eng.auburn.edu Subject: [Veritas-bu] Unadvertised utility in Netbackup Hi all,   What are your comments to the bpgp utility, and others, in netbackup? I understand that it sometimes are useful for backup admins, my self included. But isen`t it also a great security risk? Does the use of this utility get logged somewhere?   Thanks and regards, MVH / Hampus Lind Rikspolisstyrelsen National Police Board Tel dir: +46 (0)8 - 401 99 43 Tel mob: +46 (0)70 - 217 92 66 E-mail: [EMAIL PROTECTED]