amanda 3.1.2, solaris x86 server, solaris x86 client, client != server
client successfully backing up.
We moved a zpool from another machine and imported several
non-global zones onto the client.
Underlying mount points seem to be protection 700, we now see the
following error from amcheck.
ERROR: mailserv: Script 'amzfs-snapshot' command 'POST-DLE-AMCHECK' exited with
status 1: see /tmp/amanda/client/curie/selfcheck.20130215114153.debug
Client check: 1 host checked in 9.278 seconds. 32 problems found.
amdump produces its own errors, but the file systems system actually
seem to be backing up just fine.
The success of the backups would be amanda's runtar which is suid root.
The failure, at least accourding to the message above, would be amanda
attempting to run # df, withoug sufficient access.
- Me? I think the restrictive permissions on the mount points are
not good protection, if you, if you've taken over the global zone
you've taken over the non-global zones. Restricting the mount point
permissions will not contain a breach in a non-global zone, that is
not where the access lives.
Probably not an argument I have the energy to make with the other admin.
May need to ACL the mount points to allow amanda access (just because the
errors make the amanda output files very ugly and are really false
negatives, as far as overall success are concerned.
Is there an in-Amanda solution?
I'll post my work-around to the list, once I've gotten around to
working on this and have it tested.
thanks,
Brian
---
Brian R Cuttler brian.cutt...@wadsworth.org
Computer Systems Support (v) 518 486-1697
Wadsworth Center (f) 518 473-6384
NYS Department of Health Help Desk 518 473-0773
