Skip to content
This repository has been archived by the owner on Mar 19, 2021. It is now read-only.

Commit

Permalink
fixed broken references
Browse files Browse the repository at this point in the history
  • Loading branch information
joergsteffens committed Mar 21, 2014
1 parent 9b3e407 commit 8b92d56
Show file tree
Hide file tree
Showing 2 changed files with 3 additions and 17 deletions.
3 changes: 1 addition & 2 deletions manuals/en/main/critical.tex
Expand Up @@ -55,8 +55,7 @@ \section{Critical Items}
\item Backup your catalog. An example of this is found in the default
bareos-dir.conf file. The backup script is installed by default and
should handle any database, though you may want to make your own local
modifications. See also \ilink{Backing Up Your Bareos Database -
Security Considerations}{BackingUpBareosSecurityConsiderations} for more
modifications. See also \ilink{Backing Up Your Bareos Database}{BackingUpBareos} for more
information.
\item Write a bootstrap file for the catalog. An example of this is found in
the default bareos-dir.conf file. This will allow you to quickly restore your
Expand Down
17 changes: 2 additions & 15 deletions manuals/en/main/security.tex
Expand Up @@ -3,9 +3,7 @@

\chapter{Bareos Security Issues}
\label{SecurityChapter}
\index[general]{Bareos Security Issues}
\index[general]{Security}
\index[general]{Issues!Bareos Security}

\begin{itemize}
\item Security means being able to restore your files, so read the
Expand Down Expand Up @@ -33,26 +31,15 @@ \chapter{Bareos Security Issues}
section of this manual.
\item You should ensure that the Bareos working directories are readable and
writable only by the Bareos daemons.
\item If you are using {\bf MySQL} it is not necessary for it to run with
{\bf root} permission.
\item The default Bareos {\bf grant-mysql-permissions} script grants all
permissions to use the MySQL database without a password. If you want
\item The default Bareos \command{grant_bareos_privileges} script grants all
permissions to use the MySQL (and PostgreSQL) database without a password. If you want
security, please tighten this up!
\item Don't forget that Bareos is a network program, so anyone anywhere on
the network with the console program and the Director's password can access
Bareos and the backed up data.
\item You can restrict what IP addresses Bareos will bind to by using the
appropriate {\bf DirAddress}, {\bf FDAddress}, or {\bf SDAddress} records in
the respective daemon configuration files.
\item Be aware that if you are backing up your database using the default
script, if you have a password on your database, it will be passed as
a command line option to that script, and any user will be able to see
this information. If you want it to be secure, you will need to pass it
by an environment variable or a secure file.

See also \ilink{Backing Up Your Bareos
Database - Security Considerations }{BackingUpBareosSecurityConsiderations}
for more information.
\end{itemize}


Expand Down

0 comments on commit 8b92d56

Please sign in to comment.