Am 29.11.2016 um 16:14 schrieb 'Ralf Haase' via bareos-users: > Am Dienstag, 29. November 2016 16:10:30 UTC+1 schrieb Ralf Haase: >> Am Montag, 3. Oktober 2016 11:02:19 UTC+2 schrieb Phil Meech: >>> Hi, >>> >>> I run 16.3.1 (01 July 2016) and have noticed, potentially since the last >>> update I did, that I can no longer browse restores in bareos-webui. >>> Restores are functioning as they should in bconsole, and I'm able to search >>> and restore. There are no errors shown when selecting a client and job, >>> just a blank window after the intial cog in the webui. >>> >>> I've looked at the audit.log and can see some messages in there for each >>> time I try and use webui restores: >>> >>> 03-Oct 09:48 bareos-dir: Console [xxx] from [xx] cmdline llist clients >>> current >>> 03-Oct 09:48 bareos-dir: Console [xxx] from [xx], Audit acl failure for >>> Command .bvfs_get_jobids >>> 03-Oct 09:48 bareos-dir: Console [xxx] from [xx], Audit acl failure for >>> Command .bvfs_update >>> 03-Oct 09:48 bareos-dir: Console [xxx] from [xx], Audit acl failure for >>> Command .bvfs_lsdirs >>> 03-Oct 09:48 bareos-dir: Console [xxx] from [xx], Audit acl failure for >>> Command .bvfs_update >>> 03-Oct 09:48 bareos-dir: Console [xxx] from [xx], Audit acl failure for >>> Command .bvfs_lsdirs >>> 03-Oct 09:48 bareos-dir: Console [xxx] from [xx], Audit acl failure for >>> Command .bvfs_get_jobids >>> 03-Oct 09:48 bareos-dir: Console [xxx] from [xx], Audit acl failure for >>> Command .bvfs_update >>> 03-Oct 09:48 bareos-dir: Console [xxx] from [xx], Audit acl failure for >>> Command .bvfs_lsfiles >>> 03-Oct 09:48 bareos-dir: Console [xxx] from [xx], Audit acl failure for >>> Command .bvfs_update >>> 03-Oct 09:48 bareos-dir: Console [xxx] from [xx], Audit acl failure for >>> Command .bvfs_lsfiles >>> >>> Running any of these commands from bconsole work fine. >>> >>> Can anyone suggest what I can do to resolve the permissions issue here? >>> >>> Cheers, >>> Phil >> >> >> Hi everybody >> >> using bareos-webui 16.3.1.1473763711.bf9f51a-182.1 Debian Nightly package >> and the CommandACL = "!.bvfs_.*" .... (Output from bconsole show profiles) >> setting >> the file browser restore do not show any files. BAT works fine. Hmmmh. > > Audit.log shows acl failure for .bvfs_* files ... >
Just disallow .bvfs_clear_cache by negation. Every other .bvfs command is needed. By using !.bvfs_.* in your command acl every .bvfs command is forbidden. Do it like ... CommandACL = !.bvfs_clear_cache, ... I hope that helps. -- You received this message because you are subscribed to the Google Groups "bareos-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To post to this group, send email to [email protected]. For more options, visit https://groups.google.com/d/optout.
