Re: amgtar: Operation not permitted
On Tue, 19 Jan 2021 at 18:39, Diego Zuccato wrote: > Il 19/01/21 01:53, Tom Robinson ha scritto: > > > I now get a lot of permission warnings and errors. Of particular concern > > are the 'Operation not permitted' messages: > Maybe you're running SELinux on the clients and amgtar is not allowed to > access everything? > Diego you are right and thanks for the reminder! I should have checked that but forgot! There is indeed an SE Alert regarding the access issue. There is no installed policy for amgtar so I've created one and done a manual dump which looks good. Thanks for your insight and help. Kind regards, Tom
Re: amgtar: Operation not permitted
Il 19/01/21 01:53, Tom Robinson ha scritto: > I now get a lot of permission warnings and errors. Of particular concern > are the 'Operation not permitted' messages: Maybe you're running SELinux on the clients and amgtar is not allowed to access everything? -- Diego Zuccato DIFA - Dip. di Fisica e Astronomia Servizi Informatici Alma Mater Studiorum - Università di Bologna V.le Berti-Pichat 6/2 - 40127 Bologna - Italy tel.: +39 051 20 95786
Re: amgtar: Operation not permitted
On Tue, Jan 19, 2021 at 11:53:52 +1100, Tom Robinson wrote: > amanda-server 3.5.1 > > Hi, > > I've recently started using amgtar instead of tar to reduce/remove the > STRANGE output in daily backup reports. > > I now get a lot of permission warnings and errors. Of particular concern > are the 'Operation not permitted' messages: I'm not coming up with any definitive explainations off the top of my head... What OS and/or distribution is this running on? How did you install Amanada? Can you navigate down into the directories that generate these errors using "ls" executed manually (as root)? Do you have apparmor or similar kernel-level security enforcement active? Nathan Nathan Stratton Treadway - [email protected] - Mid-Atlantic region Ray Ontko & Co. - Software consulting services - http://www.ontko.com/ GPG Key: http://www.ontko.com/~nathanst/gpg_key.txt ID: 1023D/ECFB6239 Key fingerprint = 6AD8 485E 20B9 5C71 231C 0C32 15F3 ADCD ECFB 6239
amgtar: Operation not permitted
amanda-server 3.5.1 Hi, I've recently started using amgtar instead of tar to reduce/remove the STRANGE output in daily backup reports. I now get a lot of permission warnings and errors. Of particular concern are the 'Operation not permitted' messages: STRANGE DUMP DETAILS: /-- lambo.motec.com.au /etc lev 0 STRANGE sendbackup: info BACKUP=APPLICATION sendbackup: info APPLICATION=amgtar sendbackup: info RECOVER_CMD=/usr/bin/gzip -dc |/usr/lib64/amanda/application/amgtar restore [./file-to-restore]+ sendbackup: info COMPRESS_SUFFIX=.gz sendbackup: info end ? /usr/bin/tar: ./amanda: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./sssd: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./polkit-1/rules.d: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./tcsd.conf: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./pki/tls/private/lambo.motec.com.au-key.pem: Warning: Cannot open: Operation not permitted | Total bytes written: 43335680 (42MiB, 15MiB/s) sendbackup: size 42320 sendbackup: native-CRC c7d9a01b:43335680 sendbackup: client-CRC 0efa0396:23044040 sendbackup: end \ /-- lambo.motec.com.au /root lev 0 STRANGE sendbackup: info BACKUP=APPLICATION sendbackup: info APPLICATION=amgtar sendbackup: info RECOVER_CMD=/usr/bin/gzip -dc |/usr/lib64/amanda/application/amgtar restore [./file-to-restore]+ sendbackup: info COMPRESS_SUFFIX=.gz sendbackup: info end | Can't open exclude file '/root/.amanda.excludes': No such file or directory ? /usr/bin/tar: ./.ssh/id_rsa.centos: Warning: Cannot open: Operation not permitted | Total bytes written: 10577920 (11MiB, 84MiB/s) sendbackup: size 10330 sendbackup: native-CRC dc1f4c6f:10577920 sendbackup: client-CRC 56774191:953733 sendbackup: end \ /-- lambo.motec.com.au / lev 0 STRANGE sendbackup: info BACKUP=APPLICATION sendbackup: info APPLICATION=amgtar sendbackup: info RECOVER_CMD=/usr/bin/gzip -dc |/usr/lib64/amanda/application/amgtar restore [./file-to-restore]+ sendbackup: info COMPRESS_SUFFIX=.gz sendbackup: info end | /usr/bin/tar: ./dev: directory is on a different filesystem; not dumped | /usr/bin/tar: ./proc: directory is on a different filesystem; not dumped | /usr/bin/tar: ./run: directory is on a different filesystem; not dumped | /usr/bin/tar: ./sys: directory is on a different filesystem; not dumped ? /usr/bin/tar: ./etc/amanda: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./etc/sssd: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./etc/polkit-1/rules.d: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./home/centos: Warning: Cannot open: Operation not permitted | /usr/bin/tar: ./mnt/s3backup: directory is on a different filesystem; not dumped ? /usr/bin/tar: ./usr/share/polkit-1/rules.d: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./var/cache/httpd: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./var/lib/amanda: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./var/lib/chrony: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./var/lib/dav: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./var/lib/httpd: Warning: Cannot open: Operation not permitted Look in the '/var/log/amanda/log.error/lambo.motec.com.au._.0.20210118200344.errout' file for full error messages \ /-- lambo.motec.com.au /home lev 0 STRANGE sendbackup: info BACKUP=APPLICATION sendbackup: info APPLICATION=amgtar sendbackup: info RECOVER_CMD=/usr/bin/gzip -dc |/usr/lib64/amanda/application/amgtar restore [./file-to-restore]+ sendbackup: info COMPRESS_SUFFIX=.gz sendbackup: info end ? /usr/bin/tar: ./centos: Warning: Cannot open: Operation not permitted | Total bytes written: 10240 (10KiB, 12MiB/s) sendbackup: size 10 sendbackup: native-CRC 7b63f995:10240 sendbackup: client-CRC a152eb4c:451 sendbackup: end \ /-- lambo.motec.com.au /var lev 0 STRANGE sendbackup: info BACKUP=APPLICATION sendbackup: info APPLICATION=amgtar sendbackup: info RECOVER_CMD=/usr/bin/gzip -dc |/usr/lib64/amanda/application/amgtar restore [./file-to-restore]+ sendbackup: info COMPRESS_SUFFIX=.gz sendbackup: info end ? /usr/bin/tar: ./cache/httpd: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./lib/amanda: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./lib/chrony: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./lib/dav: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./lib/httpd: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./lib/openvpn: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./lib/postfix: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./lib/rpcbind: Warning: Cannot open: Operation not permitted ? /usr/bin/tar: ./lib/setroubleshoot: Warning: Ca
