Sorry, I thought that I had, not sure why the follow-up wasnt set to go the t list. Doesn't the backuppc-users list work that way anymore?
On 6/19/06, mah_list1 <[EMAIL PROTECTED]> wrote: > > > > Please keep the debate open and post to the list and not directly to me. > > ________________________________ > Fra: Rick DeNatale [mailto:[EMAIL PROTECTED] > Sendt: lø 17-06-2006 00:15 > Til: mah_list1 > Emne: Re: [BackupPC-users] correction to FAQ about ssh > > > > > The problem with both this suggestion, AND the script given on the faq > page is that although it works for backup it fails for restore. > > I wonder how many people test their backup setup without testing > restore? Remember if you don't test restore you really AREN'T testing > the backup. > > The way I do this is to use a script which contains > > exex /usr/bin/rsync $* > > which passes the arguments from the configuration in the backuppc > server. This script is only writable by it's owner which is the user > backuppcclient. > > I then setup my /etc/sudoers on the backuppc client host to only allow > the backuppcclient user to execute that ONE script as root. > > > On 6/16/06, Martin Hansen <[EMAIL PROTECTED]> wrote: > > In the section about using sudo at > > http://backuppc.sourceforge.net/faq/ssh.html > > I would like to propose a change. In the advise on using a script, using > > a script is less secure (don't know why, i was just told). And it is not > > needed in this case. > > > > The reason for using the script was to force the use of the "--server > > --sender" arguments to the rsync command. Well sudo provides this on its > > own, so setting the sudo config to > > > > backuppc ALL=NOPASSWD: /usr/bin/rsync --server --sender * > > > > causes sudo to only accept the /usr/bin/rsync command with those > > arguments, the '*' at the end tels sudo to accept more arguments after > > -- sender, in my own case i added all the static arguments to the line, > > just to be bothersome. > > > > The same goes for the tar example. > > > > > > -- > > Med venlig hilsen/mojn/regards > > Martin Hansen > > Center for Software Innovation > > Stenager 2, DK-6400 Sønderborg, Web: www.cfsi.dk > > > > > > _______________________________________________ > > BackupPC-users mailing list > > [email protected] > > > https://lists.sourceforge.net/lists/listinfo/backuppc-users > > http://backuppc.sourceforge.net/ > > > > > -- > Rick DeNatale > > IPMS/USA Region 12 Coordinator > http://ipmsr12.denhaven2.com/ > > Visit the Project Mercury Wiki Site > http://www.mercuryspacecraft.com/ > > -- Rick DeNatale IPMS/USA Region 12 Coordinator http://ipmsr12.denhaven2.com/ Visit the Project Mercury Wiki Site http://www.mercuryspacecraft.com/ _______________________________________________ BackupPC-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/backuppc-users http://backuppc.sourceforge.net/
