On 11/11/2011 12:55 PM, Grant wrote: > > The problem with my current push-style layout is that if one of the 3 > machines is compromised, the attacker can delete or alter the backup > of the compromised machine on the backup server. I can rsync the > backups from the backup server to another machine, but if the backups > are deleted or altered on the backup server, the rsync'ed copy on the > next machine will also be deleted or altered. > > If I run a pull-style layout and the backup server is compromised, the > attacker would have root read access to each of the 3 machines, but > the attacker would already have access to backups from each of the 3 > machines stored on the backup server itself so that's not really an > issue. I would also have the added inconvenience of using openvpn or > ssh -R for my laptop so the backup server can pull from it through any > router.
If an attacker can read the entire filesystem, he'll gain full root privileges quickly.
