Am 23.11.19 um 16:37 schrieb Spiros Papageorgiou:
> So, Can i limit the access of bareos-fd to a specific set of files on my
> linux server?
All standard measures apply: You can use Discretionary Access Control
(standard Unix permissions) and Mandatory Access Control (e.g. SELinux)
to do this.
Basically you run bareos-fd with a non-root account and give it
permission to do what you want it to do just like every other service.

You also need to consider that bareos-fd in the default setup cannot
only read every file on your system, but also write to every file on
your system (including its own configuration) which makes it possible
overwrite the bareos-fd configuration from the director if you didn't
plan your setup thoroughly.

Best Regards,
Andreas
-- 
  Andreas Rogge                             [email protected]
  Bareos GmbH & Co. KG                      Phone: +49 221-630693-86
  http://www.bareos.com

  Sitz der Gesellschaft: Köln | Amtsgericht Köln: HRA 29646
  Komplementär: Bareos Verwaltungs-GmbH
  Geschäftsführer: S. Dühr, M. Außendorf, J. Steffens, Philipp Storz

-- 
You received this message because you are subscribed to the Google Groups 
"bareos-users" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
To view this discussion on the web visit 
https://groups.google.com/d/msgid/bareos-users/2854f237-d774-dc01-8b59-931aa83034a2%40bareos.com.

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to