On Mon, Aug 14, 2006 at 09:06:19PM +0100, Alan Pearson wrote: > > > On 14 Aug 2006, at 20:37, Henning Brauer wrote: > > >>there an established method for keeping privileges lower when > >>doing dumps, i.e. > >>add a user who can dump and not using root to do this? > > > >you don't need root to do backups, a member of group operator is > >sufficient. we add a special backup user to each machine and restrict > >the access via ssh key a fair little bit more, like > > I presume root is need for tar, as it need file permissions ?
On the client a compiled, wrapper program, "runtar" is used to call tar. runtar is installed owned by root and setuid'ed. -- Jon H. LaBadie [EMAIL PROTECTED] JG Computing 4455 Province Line Road (609) 252-0159 Princeton, NJ 08540-4322 (609) 683-7220 (fax)
