On 17/04 2002 16:06 Johannes Niess wrote: > Toralf Lund <[EMAIL PROTECTED]> writes: > > > Is there a way I can set up amanda (2.4.2p2) to allow someone who is > not > > the dumpuser to run "amlabel". > > > > I'm currently running dumps as root (I haven't yet looked into the > > possibility of setting up permissions etc. for a different account), > but I > > want someone without root access to be able to label the tapes. > (Actually, > > I would ideally want this user to be able to run straight amlabel > > commands, but not 'amlabel -f'.) > > > > I guess I might achieve what I want by using "sudo" or similar, but is > > there a way to do it within amanda itself? > > Toralf, > > not a Amanda solution, but the sgid bit on amlabel should help. Using > suid is a very bad move: Every local user can rename tapes. > > I'm using sudo for that purpose and strongly recommend it. Especially > the syslog entries of the command lines are useful. How exactly have you configured it? - I think I can figure out how I might be set up, but it's always good to know what other people are doing.
- Toralf
