[Bacula-users] Preventing windows bacula-fd from accessing some files
Hello. I need to backup some directories on windows client used by a user AA. The problem is that the user AA have some confidential files which cant be accessible by bacula. I thought I could create a user BB having permissions to access specific directories(the ones that should by backed up) and having bacula-fd running as user BB. The problem with this solution is that bacula-fd runnig as BB cant have access to user AA desktop, and so i cant get the icon on AA' systray. How can I solve this? As far as i can see, there isn't a bacula monitor for Windows? Is there any client side ACL's. Thanks for you help -- Jaime Ventura [Infra-estruturas e Comunicações] Rua Dr. António Bernardino de Almeida, 431 4200 - 072 Porto Telef: +351 22 834 05 00 (04) - ext. 1641 Fax: +351 22 832 11 59 e-mail: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] url:www.isep.ipp.pt http://www.isep.ipp.pt - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Preventing windows bacula-fd from accessing some files
Hi Bill, thank you for your reply. I know that if install the windows client using default options, it will run as a service using the system user. Since bacula-fd is running using the system user, it will be able to access every file on the pc, rigth? I need to limit the bacula-fd to access to just a few files ( the ones I need to backup). The thing is, the pc user (AAA in my previous email) have personal information on it and he doesn't want bacula to able to access it. So I thought of running bacula-fd as a BBB user having permissions to access only files I need to backup. That way, bacula-fd doesnt have access to all files on the system, but just the ones I need to backup. This should work just fine. But, having bacula-fd running as BBB user, it wont have permissions to put the icon tray on the AAA systemTray when he is logged in. I could solve this problem if bacula had a bacula-monitor for windows, which it does not. So, i don't really know how to solve this :( Once again, thanks Jaime Ventura [Infra-estruturas e Comunicações] Rua Dr. António Bernardino de Almeida, 431 4200 - 072 Porto Telef: +351 22 834 05 00 (04) - ext. 1641 Fax: +351 22 832 11 59 e-mail: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] url:www.isep.ipp.pt http://www.isep.ipp.pt Bill Moran wrote: In response to Jaime Ventura [EMAIL PROTECTED]: Hello. I need to backup some directories on windows client used by a user AA. The problem is that the user AA have some confidential files which cant be accessible by bacula. I thought I could create a user BB having permissions to access specific directories(the ones that should by backed up) and having bacula-fd running as user BB. The problem with this solution is that bacula-fd runnig as BB cant have access to user AA desktop, and so i cant get the icon on AA' systray. How can I solve this? As far as i can see, there isn't a bacula monitor for Windows? Is there any client side ACL's. Thanks for you help Are you sure? Have you tried? When I installed Bacula on W$ machines, it runs as some meta-user that has read rights to the entire system. Are you doing some sort of custom install? Why not just use the meta-user built into Windows? - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Preventing windows bacula-fd from accessing some files
On Tuesday 14 November 2006 13:28, Jaime Ventura wrote: Hello. I need to backup some directories on windows client used by a user AA. The problem is that the user AA have some confidential files which cant be accessible by bacula. I thought I could create a user BB having permissions to access specific directories(the ones that should by backed up) and having bacula-fd running as user BB. The problem with this solution is that bacula-fd runnig as BB cant have access to user AA desktop, and so i cant get the icon on AA' systray. How can I solve this? As far as i can see, there isn't a bacula monitor for Windows? Is there any client side ACL's. Thanks for you help I recently added a section to the Win32 chapter of the online development manual (1.39.28) that explain how to do this. It takes the point of view that there should be no completely confidential files, so if this is a requirement, you should pay close attention to the suggested changes so that they do not comprise any specific security you want. -- Jaime Ventura [Infra-estruturas e Comunicações] Rua Dr. António Bernardino de Almeida, 431 4200 - 072 Porto Telef: +351 22 834 05 00 (04) - ext. 1641 Fax: +351 22 832 11 59 e-mail: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] url: www.isep.ipp.pt http://www.isep.ipp.pt - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Preventing windows bacula-fd from accessing some files
Kern, thank you very much for your reply. I will look at it carefully, Once again, thanks Jaime Ventura [Infra-estruturas e Comunicações] Rua Dr. António Bernardino de Almeida, 431 4200 - 072 Porto Telef: +351 22 834 05 00 (04) - ext. 1641 Fax: +351 22 832 11 59 e-mail: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] url:www.isep.ipp.pt http://www.isep.ipp.pt Kern Sibbald wrote: On Tuesday 14 November 2006 13:28, Jaime Ventura wrote: Hello. I need to backup some directories on windows client used by a user AA. The problem is that the user AA have some confidential files which cant be accessible by bacula. I thought I could create a user BB having permissions to access specific directories(the ones that should by backed up) and having bacula-fd running as user BB. The problem with this solution is that bacula-fd runnig as BB cant have access to user AA desktop, and so i cant get the icon on AA' systray. How can I solve this? As far as i can see, there isn't a bacula monitor for Windows? Is there any client side ACL's. Thanks for you help I recently added a section to the Win32 chapter of the online development manual (1.39.28) that explain how to do this. It takes the point of view that there should be no completely confidential files, so if this is a requirement, you should pay close attention to the suggested changes so that they do not comprise any specific security you want. -- Jaime Ventura [Infra-estruturas e Comunicações] Rua Dr. António Bernardino de Almeida, 431 4200 - 072 Porto Telef: +351 22 834 05 00 (04) - ext. 1641 Fax: +351 22 832 11 59 e-mail: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] url: www.isep.ipp.pt http://www.isep.ipp.pt - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
Re: [Bacula-users] Preventing windows bacula-fd from accessing some files
In response to Jaime Ventura [EMAIL PROTECTED]: Hi Bill, thank you for your reply. I know that if install the windows client using default options, it will run as a service using the system user. Since bacula-fd is running using the system user, it will be able to access every file on the pc, rigth? I need to limit the bacula-fd to access to just a few files ( the ones I need to backup). The thing is, the pc user (AAA in my previous email) have personal information on it and he doesn't want bacula to able to access it. So I thought of running bacula-fd as a BBB user having permissions to access only files I need to backup. That way, bacula-fd doesnt have access to all files on the system, but just the ones I need to backup. This should work just fine. But, having bacula-fd running as BBB user, it wont have permissions to put the icon tray on the AAA systemTray when he is logged in. I could solve this problem if bacula had a bacula-monitor for windows, which it does not. So, i don't really know how to solve this :( Once again, thanks I have a feeling that you're on the wrong road for the wrong reasons. First, you need to clearly establish the status of those files: 1) Are they important data? 2) Are they confidential data? If the answer to #1 is yes, then you need to back them up. It sounds to me that the answer to #2 is yes and you're using that as a reason _not_ to back the data up, which is a _VERY_ bad idea. I could go on and on about foolish assumptions such as the assumption that your Windows client is more secure than the Bacula server ... However, I'll cut to the chase: 1) If the data is just personal, then simply exclude those files from the backup fileset using a wildcard if necessary. 2) If the data is confidential, then you're putting the cart before the horse by trying to teach bacula not to back it up. Instead, use some sort of file-level encryption, such as one of pgp's tools. Then, you can even back up the encrypted files if it makes sense to do so, without sacrificing their confidentiality. The approach you're taking is like trying to fix a flat tire by changing the spark plugs. -- Bill Moran Collaborative Fusion Inc. IMPORTANT: This message contains confidential information and is intended only for the individual named. If the reader of this message is not an intended recipient (or the individual responsible for the delivery of this message to an intended recipient), please be advised that any re-use, dissemination, distribution or copying of this message is prohibited. Please notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
[Bacula-users] Preventing windows bacula-fd from accessing some files
Hello. I need to backup some directories on windows client used by a user AA. The problem is that the user AA have some confidential files which cant be accessible by bacula. I thought I could create a user BB having permissions to access specific directories(the ones that should by backed up) and having bacula-fd running as user BB. The problem with this solution is that bacula-fd runnig as BB cant have access to user AA desktop, and so i cant get the icon on AA' systray. How can I solve this? As far as i can see, there isn't a bacula monitor for Windows? Is there any client side ACL's. Thanks for you help Jaime Ventura [Infra-estruturas e Comunicações] Rua Dr. António Bernardino de Almeida, 431 4200 - 072 Porto Telef: +351 22 834 05 00 (04) - ext. 1641 Fax: +351 22 832 11 59 e-mail: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] url:www.isep.ipp.pt http://www.isep.ipp.pt - Using Tomcat but need to do more? Need to support web services, security? Get stuff done quickly with pre-integrated technology to make your job easier Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo http://sel.as-us.falkag.net/sel?cmd=lnkkid=120709bid=263057dat=121642 ___ Bacula-users mailing list Bacula-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/bacula-users
