Re: [rdiff-backup-users] "warning security violation" on fs_abilities.restore_set_globals when trying to restore [ctd]

[Andrew Ferguson]

On Jul 25, 2008, at 11:43 AM, Klaas Gadeyne wrote:
> > And did you do the --restrict-read-only options that Dean suggests  
> > in his HOWTO?
>
> Yes, .ssh/authorized_keys contains
>
> command="rdiff-backup --server --restrict-read- 
> only /",from="gatefmtc-new",no-port-forwarding,no-X11-forwarding,no- 
> pty ssh-rsa ....


Well, there you have it. :-)

In this command, you told rdiff-backup that / is *read-only* ... when  
you tried to restore, then it rejects it since restoring requires  
writing. Simply remove that option and you'll be fine. Dean mentions  
in a few places that if you setup exactly as he did, then rdiff-backup  
will be restricted to read-only on the server.

I bet that was the problem in last year's thread, too ... since he was  
able to restore locally, which wouldn't have gone through ssh in that  
direction.


Andrew