Added Director profile operator

This profile can be used by named consoles.
It is intended to be used for daily administrative operations.
It gives access to most of Bareos functionality,
but blocking some potentially dangerous commands.

debian/bareos-director.install.in

@@ -22,6 +22,7 @@
 @confdir@/bareos-dir.d/pool/Full.conf                        @configtemplatedir@/bareos-dir.d/pool/
 @confdir@/bareos-dir.d/pool/Incremental.conf                 @configtemplatedir@/bareos-dir.d/pool/
 @confdir@/bareos-dir.d/pool/Scratch.conf                     @configtemplatedir@/bareos-dir.d/pool/
+@confdir@/bareos-dir.d/profile/operator.conf                 @configtemplatedir@/bareos-dir.d/profile/
 @confdir@/bareos-dir.d/schedule/WeeklyCycleAfterBackup.conf  @configtemplatedir@/bareos-dir.d/schedule/
 @confdir@/bareos-dir.d/schedule/WeeklyCycle.conf             @configtemplatedir@/bareos-dir.d/schedule/
 @confdir@/bareos-dir.d/storage/File.conf                     @configtemplatedir@/bareos-dir.d/storage/

platforms/packaging/bareos.spec

@@ -918,6 +918,7 @@ echo "This is a meta package to install a full bareos system" > %{buildroot}%{_d
 %attr(0640, %{director_daemon_user}, %{daemon_group}) %config(noreplace) %{_sysconfdir}/bareos/bareos-dir.d/pool/Full.conf
 %attr(0640, %{director_daemon_user}, %{daemon_group}) %config(noreplace) %{_sysconfdir}/bareos/bareos-dir.d/pool/Incremental.conf
 %attr(0640, %{director_daemon_user}, %{daemon_group}) %config(noreplace) %{_sysconfdir}/bareos/bareos-dir.d/pool/Scratch.conf
+%attr(0640, %{director_daemon_user}, %{daemon_group}) %config(noreplace) %{_sysconfdir}/bareos/bareos-dir.d/profile/operator.conf
 %attr(0640, %{director_daemon_user}, %{daemon_group}) %config(noreplace) %{_sysconfdir}/bareos/bareos-dir.d/schedule/WeeklyCycleAfterBackup.conf
 %attr(0640, %{director_daemon_user}, %{daemon_group}) %config(noreplace) %{_sysconfdir}/bareos/bareos-dir.d/schedule/WeeklyCycle.conf
 %attr(0640, %{director_daemon_user}, %{daemon_group}) %config(noreplace) %{_sysconfdir}/bareos/bareos-dir.d/storage/File.conf

src/defaultconfigs/bareos-dir.d/profile/operator.conf

@@ -0,0 +1,19 @@
+Profile {
+   Name = operator
+   Description = "Profile allowing normal Bareos operations."
+
+   Command ACL = !.bvfs_clear_cache, !.exit, !.sql
+   Command ACL = !configure, !create, !delete, !purge, !sqlquery, !umount, !unmount
+   Command ACL = *all*
+
+   Catalog ACL = *all*
+   Client ACL = *all*
+   FileSet ACL = *all*
+   Job ACL = *all*
+   Plugin Options ACL = *all*
+   Pool ACL = *all*
+   Schedule ACL = *all*
+   Storage ACL = *all*
+   Where ACL = *all*
+}
+