Mailinglist Archive: opensuse-security (394 mails)

< Previous Next >
RE: [suse-security] Secure Backup
  • From: "Mario Ohnewald" <mario.Ohnewald@xxxxxx>
  • Date: Thu, 4 Dec 2003 12:06:01 +0100 (MET)
  • Message-id: <26425.1070535961@xxxxxxxxxxxxx>
hi,

> You can use plain ssh and create an unpriviledged user to store the backup
> files,
> I normally do something like this with ufsdump which obviously won't work
> on
> suse but tar should be ok as well:
>
> tar -czf - / | ssh -l <user> <host> 'dd -of=backup.tar.gz'

But i would still like to stick to rsync, cause it has the delete and
replace feature. So i dont have to tranfser the whole archive each time.

>
> (check syntax first, out of head and head isn't fully patched at the
> moment
> + infected with a trojan that is now compromising stomach as well, hate
> colleagues so trying bio warfare by working anyway)
>
> --
> Ronny Martin
>
>
> > -----Original Message-----
> > From: Mario Ohnewald [mailto:mario.Ohnewald@xxxxxx]
> > Sent: Thursday, December 04, 2003 10:32 AM
> > To: suse-security@xxxxxxxx
> > Subject: [suse-security] Secure Backup
> >
> >
> > Hello!
> > I have two boxes and want to save a backup of each others on it.
> > So far i have created a ssh key for both machines so i can
> > make a ssh rsync
> > to each other.
> > But the terrible sideeffect is that IF one of those boxed get
> > compromized
> > the cracker will be root on both of them!!!
> >
> > My Backup script:
> > #--- START
> > ---------------------------------------------------------------------
> > #!/bin/sh
> > speed=500
> > verzeichnisse="etc home root boot usr/local/bin/"
> >
> > for verzeichniss in $verzeichnisse
> > do
> > find /$verzeichniss -size +10200k | rsync -avvz
> > --exclude-from=-
> > --delete -e "ssh" /$verzeichniss bortal.de:/backup/sts/
> > done
> > #--- END
> > --------------------------------------------------------------
> > -----------
> >
> >
> > I need to save it on each other because both have a 100MBit Internet
> > connection which makes a restoring backup easy! So a tape
> > Backup is not really
> > possible. :/
> >
> > Any ideas/hints?
> >
> >

--
+++ GMX - die erste Adresse für Mail, Message, More +++
Neu: Preissenkung für MMS und FreeMMS! http://www.gmx.net



< Previous Next >