Thanks Andy and Zoltan for your reply! Indeed this makes TSM not suitable for rolling back security errors. In fact, when you change security attributes you won't be able to recover your system to anything but the last backup state. No more point-in-time. Ok yes, you can restore your files back to a point in time, but your server isn't, because of the incorrect permissions. Personally if find this a flaw of the product... Kind regards, Eric van Loon AF/KLM Storage Engineering
-----Original Message----- From: ADSM: Dist Stor Manager [mailto:ADSM-L@VM.MARIST.EDU] On Behalf Of Andrew Raibeck Sent: donderdag 12 maart 2015 15:38 To: ADSM-L@VM.MARIST.EDU Subject: Re: Linux permissions not restored Hi Eric, On UNIX and Linux systems, if only file permissions have changed, then the latest backup copy is updated with the changed permissions; it is not backed up again in full. >From the online documentation at http://www-01.ibm.com/support/knowledgecenter/SSGSG7_7.1.1/com.ibm.itsm.client.doc/c_bac_fullpart.html: Files are backed up when any of the following attributes change: * File size * Date or time of last modification * Extended Attributes * Access Control List If only the following attributes change, the attributes are updated on the Tivoli Storage Manager server, but the file is not backed up: * File owner * File permissions <== This one * Inode * Group ID * Change time (ctime) attribute. See the updatectime option for details. (AIX and Linux only) * Icon location (Mac OS X only) * Type or creator (Mac OS X only) Best regards, - Andy ____________________________________________________________________________ Andrew Raibeck | Tivoli Storage Manager Level 3 Technical Lead | stor...@us.ibm.com IBM Tivoli Storage Manager links: Product support: http://www.ibm.com/support/entry/portal/Overview/Software/Tivoli/Tivoli_Storage_Manager Online documentation: http://www.ibm.com/support/knowledgecenter/SSGSG7/welcome Product Wiki: https://www.ibm.com/developerworks/community/wikis/home/wiki/Tivoli%20Storage%20Manager "ADSM: Dist Stor Manager" <ADSM-L@VM.MARIST.EDU> wrote on 2015-03-12 10:25:47: > From: "Loon, EJ van (ITOPT3) - KLM" <eric-van.l...@klm.com> > To: ADSM-L@VM.MARIST.EDU > Date: 2015-03-12 10:26 > Subject: Linux permissions not restored Sent by: "ADSM: Dist Stor > Manager" <ADSM-L@VM.MARIST.EDU> > > Hi guys! > Yesterday someone accidentally changed permissions on one of our Lotus > Notes servers. A new backup was made yesterday evening, but we cannot > restore the file with the old permissions. The client shows only one > active file in TSM (backup date 05/17/2013) and when this one is > restored the permissions are the same as today. > The file looked like this the day before yesterday: > -r-sr-xr-x 1 root bin 9092 Sep 16 2011 /app/LOTUSDOMINO/groupware/ > bin/slg14gpw/lotus/notes/85030/linux/bindsock > This is the file after the restore: > -r-xr-xr-x 1 slg12gpw dominoadm 9092 Sep 16 2011 /app/LOTUSDOMINO/ > groupware/bin/slg12gpw/lotus/notes/85030/linux/bindsock > Why isn't it possible to restore the right permissions, even with the > pitdate parameter? And why do I only see one file in TSM? I would > expect two (one with the old permissions and one with the new)... > Thanks for any help in advance! > Kind regards, > Eric van Loon > AF/KLM Storage Engineering > ******************************************************** > For information, services and offers, please visit our web site: > http://www.klm.com. This e-mail and any attachment may contain > confidential and privileged material intended for the addressee only. > If you are not the addressee, you are notified that no part of the > e-mail or any attachment may be disclosed, copied or distributed, and > that any other action related to this e-mail or attachment is strictly > prohibited, and may be unlawful. If you have received this e-mail by > error, please notify the sender immediately by return e-mail, and > delete this message. > > Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/ or > its employees shall not be liable for the incorrect or incomplete > transmission of this e-mail or any attachments, nor responsible for > any delay in receipt. > Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal > Dutch Airlines) is registered in Amstelveen, The Netherlands, with > registered number 33014286 > ******************************************************** > ******************************************************** For information, services and offers, please visit our web site: http://www.klm.com. This e-mail and any attachment may contain confidential and privileged material intended for the addressee only. If you are not the addressee, you are notified that no part of the e-mail or any attachment may be disclosed, copied or distributed, and that any other action related to this e-mail or attachment is strictly prohibited, and may be unlawful. If you have received this e-mail by error, please notify the sender immediately by return e-mail, and delete this message. Koninklijke Luchtvaart Maatschappij NV (KLM), its subsidiaries and/or its employees shall not be liable for the incorrect or incomplete transmission of this e-mail or any attachments, nor responsible for any delay in receipt. Koninklijke Luchtvaart Maatschappij N.V. (also known as KLM Royal Dutch Airlines) is registered in Amstelveen, The Netherlands, with registered number 33014286 ********************************************************