>Some of our files are more confidential and I would like to hide these
>a little: the director's files and the accounts. Is there anyway to
>protect these? It doesn't have to be high grade security, just
>security through obscurity.
As I'm sure you know, and others have pointed out, about all you're going
to get with simple tweaks is "security through obscurity", but as that's
a given as OK for the moment ...
The following (amazingly trivial :-) patch allows amrecover commands on
the command line, e.g.:
amrecover <config> "sethost xxx" "setdisk /home" "cd some-user"
So that might help a little.
I second the motion to use sudo (since amrecover must be run as root).
That, in conjunction with a wrapper script around amrecover, might get
you started.
>What about the "set owner to '.'" bit?
Just tell them to always answer "no". The '.' in this case would either
be the top level of the file system or a temp directory in it (see below),
and in either case it's best left alone.
Remember that amrecover must be run as root, and it runs the restore
program as root.
>I could write a script to:
>
>1) ask for the username
>2) start up the amrestore program, setting the lcd to that user's
>directory. Better still, a directory inside that directory called
>recover.
I've appended my "amr" wrapper script. It takes an (optional) user name
on the command line, cd's to the top of the home directory file system,
creates a .bkrest.$$ temp directory and cd's into there, then fires up
amrecover. That could easily be changed to create and use your "restore"
directory within the home.
With the patch below you should be able to add the command to "cd" to the
home directory, which obscures the restore a bit as they would have to
explicitly go up a level to see anything else. You don't need to "lcd"
since the script puts you in the right place to start with.
The amr script does a bunch of other things you won't be interested in.
Just ask if anything is confusing. One thing it calls is another script
named amlocal that takes a host name and echoes several shell assignement
statements for the config, the index host, the tape host, etc.
>Tom
John R. Jackson, Technical Software Specialist, [EMAIL PROTECTED]
amrecover-argv.diff
amr.ksh
