[csw-maintainers] write access to tape devices

[Darin Perusich]

Ben,

Having the bacula user in the 'sys' group should be all that's
necessary to write to the tape devices and read the disk device, this
is the case for Amanda, but if you're using something outside of
ufsdump/ufsrestore you'll hit permissions issues. For Amanda there are
some RBAC rules that need to be set for taking ZFS snapshots and
stuff. You'll need to take a look at the Amanda package or my build
scripts to get the details. I'm not managing Solaris systems anymore
so I don't recall the specifics.

--
Later,
Darin



On Fri, Apr 29, 2011 at 11:18 AM, Ben Walton <bwalton at opencsw.org> wrote:
> Excerpts from Philip Brown's message of Fri Apr 29 11:14:49 -0400 2011:
>
> Hi Phil,
>
>> so you arent being that much more "secure" by putting bacula in
>> group sys.
>
> Well, I'm trying to have the daemons run with uid != 0, but the
> storage daemon in some configs will need tape access, so I need to
> make sure it has the required rights.
>
> Thanks for the info though.
>
> Thanks
> -Ben
> --
> Ben Walton
> Systems Programmer - CHASS
> University of Toronto
> C:416.407.5610 | W:416.978.4302
>
> _______________________________________________
> maintainers mailing list
> maintainers at lists.opencsw.org
> https://lists.opencsw.org/mailman/listinfo/maintainers
> .:: This mailing list's archive is public. ::.
>