[Top][All Lists]

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [rdiff-backup-users] Prevent rdiff-backup from deleting?

From: Sarel Botha
Subject: Re: [rdiff-backup-users] Prevent rdiff-backup from deleting?
Date: Tue, 15 Nov 2011 11:28:51 -0500
User-agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:7.0.1) Gecko/20110929 Thunderbird/7.0.1

A simple solution is to edit the python source code for rdiff-backup on the backup server and restrict what it will accept for the --remove-older-than argument.

You could also have two different versions of rdiff-backup on the backup server. One accessed remotely that has this option completely disabled (by editing the source). The other version would be the original code but can only be accessed from the local backup server.


On 11/14/2011 9:03 PM, Grant wrote:
The problem is that I run rdiff-backup in a crontab and one of the commands there includes --remove-older-than. That's a very creative solution though. Because of this, I think there is a gaping security hole in any automated rdiff-backup scheme that pushes backups to the server. Pulling to the backup server eliminates this problem, but if the backup server is compromised, the infiltrator has root read access to each system being backed up and can thereby compromise each of those systems as well. Is rdiff-backup ill-suited to automated backups? - Grantolutionsfirst.com.au/index.php/RdiffBackupWiki

reply via email to

[Prev in Thread] Current Thread [Next in Thread]