On 23.11.19 at 16:37 wrote Spiros Papageorgiou: > Hi all, > > I have a linux machine that produces some data that I want to backup. I > want to use a centralized backup service (based on bareos) that I have > access to. So, they told me to install bareos-fd and tell them which > files, I want them to backup. > > My problem is that I would like to limit the files that bareos-fd has > access to, because the centralized backup service has potentialy the > capability of backing up all the files of my linux , which is something > i don't want. > > So, Can i limit the access of bareos-fd to a specific set of files on my > linux server?
Typically, this is solved in another way. If you use https://docs.bareos.org/master/TasksAndConcepts/DataEncryption.html, the Bareos Director can still retrieve all files, but all the backup data will be encrypted before it is transferred to the server and only you client can deencrypt it. (the content of the files is encrypted. Meta-data like filenames and timestamps are still readable.) Alternately, the bareos-fd normally runs as root to get access to all files. You can run it as another user and therefore the bareos-fd can only access the files accessible by that user. In any case, you should also disable or at least limit run scripts, as otherwise the admin can retrieve data with these scripts. Also Plugins should be disabled or restricted. So take a look at https://docs.bareos.org/master/Configuration/FileDaemon.html * Allowed Job Command * Allowed Script Dir * Plugin Directory * Plugin Names Regards, Jörg -- Jörg Steffens [email protected] Bareos GmbH & Co. KG Phone: +49 221 630693-91 http://www.bareos.com Fax: +49 221 630693-10 Sitz der Gesellschaft: Köln | Amtsgericht Köln: HRA 29646 Komplementär: Bareos Verwaltungs-GmbH Geschäftsführer: S. Dühr, M. Außendorf, Jörg Steffens, P. Storz -- You received this message because you are subscribed to the Google Groups "bareos-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion on the web visit https://groups.google.com/d/msgid/bareos-users/qrbmdt%24lbr%241%40blaine.gmane.org.
