bugrdiff-backup - Bugs: bug #30663, umask of backup user will not be...

 
 

bug #30663: umask of backup user will not be processed correctly

Submitted by:  None
Submitted on:  Thu 05 Aug 2010 08:11:55 PM UTC  
 
Category: NoneSeverity: 3 - Normal
Item Group: NoneStatus: None
Privacy: PublicAssigned to: None
Open/Closed: Open

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Thu 05 Aug 2010 08:11:55 PM UTC, original submission:

Hello,

To make the backup strategy more secure, it is often useful to make one user for doing the backups, and other users only are in some read only groups which can restore backups but not change the backed up files.

This can in general easily accomplished by having a umask of the backup creation user of 0027, so the group has only execute and read rights.

The Problem is, that rdiff backup changes the default linux users umask, and give most files in the backup NO permissions to the group. So all restoring users which were in the restoring group which should normaly have read only permissions have due to this behavior NO permissions.

So this, IMHO, more secure strategy of seperating backup user and restore user is not supportet in rdiff-backup version 1.2.8

regards,
Christian

Anonymous

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by ceelian
  •  

    Do you think this task is very important?
    If so, you can click here to add your encouragement to it.
    This task has 0 encouragements so far.

    Only logged-in users can vote.

     

    Please enter the title of George Orwell's famous dystopian book (it's a date):

     

     

    Follows 1 latest change.

    Date Changed By Updated Field Previous Value => Replaced By
    Thu 05 Aug 2010 08:15:37 PM UTCceelianCarbon-Copy-=>Added ceelian

    Back to the top


    Powered by Savane 3.1-cleanup1