On 02/12/16 05:44 PM, Bruno Friedmann wrote: > On mercredi, 10 février 2016 12.31:54 h CET David Pearce wrote: >> 1) We have a machine that for PCI reasons needs to be backed up, but can not >> allow Bareos to restore back to it. Is there a way to disable restores? >> maybe at the bareos-fd level? >> > use -k in bareos-fd > -k Keep readall permission when dropping privileges. > I've got a look at doc, but this still need to be done, but man bareos-fd is > your friend. I wouldn't not use that but have a look at our extensive docs their are two ways to accomplish this. e.g. use the -b option which means backup only (there is also the -r option for restore only). Or use the more generic AllowedJobCommand see https://www.bareos.org/en/HOWTO/articles/new-in-version-1320.html security enhancement which exactly is ment for these kind of cases. As I have been a senior consultant in most major companies over the last 20 years I know this requirement that is why we early in development added something generic. e.g. running scripts via any backup or monitoring tool is also something security audits are not to forgiven about.
> >> 2) Does Bareos use or set the archive bit when a Windows machine is backed >> up? I always though Bareos used the database info and hash value to >> determine what files to backup but I was told I am wrong. How does Bareos >> determine what to backup during a incremental backup? > > The best is to play with accurate options > see documentation here > http://doc.bareos.org/master/html/bareos-manual-main-reference.html#x1-119016 > > Accurate use same symbole as verify >> Thanks. Correct by default it uses timestamps and other OS specific things. To have full control over this you want to use accurate. -- Marco van Wieringen [email protected] Bareos GmbH & Co. KG Phone: +49-221-63069389 http://www.bareos.com Sitz der Gesellschaft: Köln | Amtsgericht Köln: HRA 29646 Komplementär: Bareos Verwaltungs-GmbH Geschäftsführer: Stephan Dühr, M. Außendorf, J. Steffens, P. Storz, M. v. Wieringen -- You received this message because you are subscribed to the Google Groups "bareos-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. For more options, visit https://groups.google.com/d/optout.
