Ben, Having the bacula user in the 'sys' group should be all that's necessary to write to the tape devices and read the disk device, this is the case for Amanda, but if you're using something outside of ufsdump/ufsrestore you'll hit permissions issues. For Amanda there are some RBAC rules that need to be set for taking ZFS snapshots and stuff. You'll need to take a look at the Amanda package or my build scripts to get the details. I'm not managing Solaris systems anymore so I don't recall the specifics.
-- Later, Darin On Fri, Apr 29, 2011 at 11:18 AM, Ben Walton <[email protected]> wrote: > Excerpts from Philip Brown's message of Fri Apr 29 11:14:49 -0400 2011: > > Hi Phil, > >> so you arent being that much more "secure" by putting bacula in >> group sys. > > Well, I'm trying to have the daemons run with uid != 0, but the > storage daemon in some configs will need tape access, so I need to > make sure it has the required rights. > > Thanks for the info though. > > Thanks > -Ben > -- > Ben Walton > Systems Programmer - CHASS > University of Toronto > C:416.407.5610 | W:416.978.4302 > > _______________________________________________ > maintainers mailing list > [email protected] > https://lists.opencsw.org/mailman/listinfo/maintainers > .:: This mailing list's archive is public. ::. > _______________________________________________ maintainers mailing list [email protected] https://lists.opencsw.org/mailman/listinfo/maintainers .:: This mailing list's archive is public. ::.
