In response to Jaime Ventura <[EMAIL PROTECTED]>:

> Hi Bill,
>     thank you for your reply.
>     I know that if install the windows client using default options, it 
> will run as a service using the "system" user.
>     Since bacula-fd is running using the "system" user, it will be able 
> to access every file on the pc, rigth?
>     I need to limit the bacula-fd to access to just a few files ( the 
> ones I need to backup). The thing is, the pc user (AAA in my previous 
> email) have personal information on it and he doesn't want bacula to 
> able to access it.
>     So I thought  of running bacula-fd as a BBB user having permissions 
> to access only files I need to backup. That way, bacula-fd doesnt have 
> access to all files on the system, but just the ones I need to backup.
>     This should work just fine.
>     But, having bacula-fd running as BBB user, it wont have permissions 
> to put the icon tray on the AAA systemTray when he is logged in.
>     I could solve this problem if bacula had a "bacula-monitor" for 
> windows, which  it does not.
>     So, i don't really know how to solve this :(
>     Once again, thanks

I have a feeling that you're on the wrong road for the wrong reasons.

First, you need to clearly establish the status of those files:
1) Are they important data?
2) Are they confidential data?

If the answer to #1 is "yes", then you need to back them up.

It sounds to me that the answer to #2 is "yes" and you're using that as
a reason _not_ to back the data up, which is a _VERY_ bad idea.

I could go on and on about foolish assumptions such as the assumption
that your Windows client is more secure than the Bacula server ...

However, I'll cut to the chase:

1) If the data is just "personal", then simply exclude those files from
   the backup fileset using a wildcard if necessary.
2) If the data is "confidential", then you're putting the cart before the
   horse by trying to teach bacula not to back it up.  Instead, use some
   sort of file-level encryption, such as one of pgp's tools.  Then, you
   can even back up the encrypted files if it makes sense to do so,
   without sacrificing their confidentiality.

The approach you're taking is like trying to fix a flat tire by changing
the spark plugs.

-- 
Bill Moran
Collaborative Fusion Inc.



IMPORTANT: This message contains confidential information and is intended only 
for the individual named. If the reader of this message is not an intended 
recipient (or the individual responsible for the delivery of this message to an 
intended recipient), please be advised that any re-use, dissemination, 
distribution or copying of this message is prohibited.  Please notify the 
sender immediately by e-mail if you have received this e-mail by mistake and 
delete this e-mail from your system.



-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Bacula-users mailing list
Bacula-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/bacula-users

Reply via email to