Page 1 of 2 12 LastLast
Results 1 to 10 of 18

Thread: backup user

  1. #1
    Join Date
    Jul 2011
    Location
    Poland
    Posts
    107

    Question backup user

    I am thinking about backup solution. In my opinion, the best are bacula, amanda and backuppc. Bacula is too complicated now. Amanda is very good, very secure and it has advanced backup scheduling (auto set when full and when incremental) but it is rather for tapes backup (there are even vtapes for disk backup) and there is no dedyplication.
    BackupPC is not so secure but I can use ssh to transfer data (only Linux systems backup) and encrypt disks. But the main goal is deduplication. I want to have backups in some disk matrix, so deduplication is very important.
    <<--- if you have any suggestions to my choice, fill free to write your opinions


    But now I have main question of that topic:

    What user should I use in client devices to backup data? The easiest way is to use root, but it is very unsecure i think :/ What do you think about that?

  2. #2
    Join Date
    Jun 2008
    Location
    Earth - Denmark
    Posts
    10,730

    Default Re: backup user

    On 11/21/2011 08:16 PM, rysic wrote:
    > What user should I use in client devices to backup data?


    use the least powerful user who has both the right to read all the files
    you want to back up _and_ write to the medium/partition you wish to
    write to (and, it should be able to read the newly written--to check it
    was right written)..

    What do you think about that?

    --
    DD

  3. #3
    Join Date
    Jul 2011
    Location
    Poland
    Posts
    107

    Default Re: backup user

    So I have to use extended ACLs? Isn't it slowing Linux?

  4. #4
    Join Date
    Jul 2008
    Location
    Seattle, WA
    Posts
    17,079

    Default Re: backup user

    On Mon, 21 Nov 2011 21:16:03 +0000, rysic wrote:

    > So I have to use extended ACLs? Isn't it slowing Linux?


    No, that's not what he's saying. As with any administrative task, it's
    generally considered good practice to use an account with the minimum
    privileges necessary to get the job done.

    If you just want to back up the files in your home directory, it doesn't
    make sense to use the root account to do that.

    That's what the point is.

    Jim
    --
    Jim Henderson
    openSUSE Forums Administrator
    Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

  5. #5
    Join Date
    Feb 2009
    Location
    Spain
    Posts
    25,547

    Default Re: backup user

    On 2011-11-22 01:13, Jim Henderson wrote:
    > If you just want to back up the files in your home directory, it doesn't
    > make sense to use the root account to do that.
    >
    > That's what the point is.


    Actually, backups have to be done by root in Linux, because nobody can copy
    /home keeping all the permissions and ownerships. Even if a plain user can
    read the files, they will be copied with the owner changed to him, not the
    original owner.

    A user can backup his home, but not others.

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 11.4 x86_64 "Celadon" at Telcontar)

  6. #6
    Join Date
    Jul 2008
    Location
    Seattle, WA
    Posts
    17,079

    Default Re: backup user

    On Tue, 22 Nov 2011 01:38:06 +0000, Carlos E. R. wrote:

    > On 2011-11-22 01:13, Jim Henderson wrote:
    >> If you just want to back up the files in your home directory, it
    >> doesn't make sense to use the root account to do that.
    >>
    >> That's what the point is.

    >
    > Actually, backups have to be done by root in Linux, because nobody can
    > copy /home keeping all the permissions and ownerships. Even if a plain
    > user can read the files, they will be copied with the owner changed to
    > him, not the original owner.
    >
    > A user can backup his home, but not others.


    Which was my point - if the user wants to back up their own home, their
    own ID is sufficient.

    If they want to do more than that, then an account with more privileges
    is necessary.

    Jim



    --
    Jim Henderson
    openSUSE Forums Administrator
    Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

  7. #7
    Join Date
    Feb 2009
    Location
    Spain
    Posts
    25,547

    Default Re: backup user

    On 2011-11-22 02:44, Jim Henderson wrote:
    > If they want to do more than that, then an account with more privileges
    > is necessary.


    But Linux doesn't have that granularity. No user except root can write
    backup files with the correct ownership.

    (I'm unsure about tars?)

    I hate to say this, but Windows does have more flexibility here. There is a
    set of permissions predefined for the backup user precisely. I find Windows
    administration complex, all that clicking here and there a thousand times,
    instead of filling a text file. But they do have that flexibility, that
    granularity of permissions.

    Unless I'm mistaken and it can be done with ACLs?

    --
    Cheers / Saludos,

    Carlos E. R.
    (from 11.4 x86_64 "Celadon" at Telcontar)

  8. #8
    Join Date
    Jul 2008
    Location
    Seattle, WA
    Posts
    17,079

    Default Re: backup user

    On Tue, 22 Nov 2011 02:28:06 +0000, Carlos E. R. wrote:

    > On 2011-11-22 02:44, Jim Henderson wrote:
    >> If they want to do more than that, then an account with more privileges
    >> is necessary.

    >
    > But Linux doesn't have that granularity. No user except root can write
    > backup files with the correct ownership.


    Depends on what the goal is for the OP. If he just wants the data, other
    users would be sufficient.

    > (I'm unsure about tars?)
    >
    > I hate to say this, but Windows does have more flexibility here. There
    > is a set of permissions predefined for the backup user precisely. I find
    > Windows administration complex, all that clicking here and there a
    > thousand times, instead of filling a text file. But they do have that
    > flexibility, that granularity of permissions.
    >
    > Unless I'm mistaken and it can be done with ACLs?


    I believe it can be done, but I've only ever used root to do backups
    myself, or (more often) used a tool like partimage to back up the
    partition the files are on.

    Jim
    --
    Jim Henderson
    openSUSE Forums Administrator
    Forum Use Terms & Conditions at http://tinyurl.com/openSUSE-T-C

  9. #9
    Join Date
    Jun 2008
    Location
    Earth - Denmark
    Posts
    10,730

    Default Re: backup user

    On 11/21/2011 10:16 PM, rysic wrote:
    > So I have to use extended ACLs?


    sorry, i have absolutely no idea what an "extended ACL" is....care to
    eleborate?

    --
    DD

  10. #10
    Join Date
    Feb 2010
    Location
    Germany
    Posts
    4,654

    Default Re: backup user

    Am 22.11.2011 03:28, schrieb Carlos E. R.:
    > (I'm unsure about tars?)

    With tar it should be possible as a normal user (-p switch) but I cannot
    test that right now.
    You will of course need root rights when you restore from the tar to
    restore the owner.

    --
    PC: oS 11.4 (dual boot 12.1) 64 bit | Intel Core i7-2600@3.40GHz | KDE
    4.6.0 | GeForce GT 420 | 16GB Ram
    Eee PC 1201n: oS 11.4 64 bit | Intel Atom 330@1.60GHz | KDE 4.7.3 |
    nVidia ION | 3GB Ram

Page 1 of 2 12 LastLast

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •