[pkg-bacula-devel] Permission problem with bacula-tray-monitor.conf

[Sven Hartge]

On 24.12.18 00:21, Carsten Leonhardt wrote:
> Hi,
> 
>> I just noticed a problem with the permission of bacula-tray-monitor.conf.
>>
>> Currently the file is "640 root:bacula" but for the normal user to be
>> able to read it, it needs either be 644 or the user must be in the group
>> bacula.
>>
>> I didn't notice until now, because on all systems where I use the tray
>> monitor my user is in said group.
>>
>> IMHO the safest way is to have the file world-readable because in a
>> normal installation the FD-Monitor user can't do anything other than
>> read the current state of the FD from the FD.
>>
>> Comments?
> 
> Hm. I'd say we leave it as is. We don't know the client computer setups,
> maybe there are users that shouldn't be able to see the state of the
> backups. If someone should be able to see, let the admin add these users
> to the bacula group.
> 
> A note to that effect somewhere might be justified though.

Fair enough. I have no preference either way, I just noticed the problem
when nothing happened after starting the tray monitor as a normal user.

Grüße,
Sven.


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://alioth-lists.debian.net/pipermail/pkg-bacula-devel/attachments/20181224/d7d0219c/attachment.sig>