From owner-freebsd-questions Sun Dec 19 18: 0:14 1999 Delivered-To: freebsd-questions@freebsd.org Received: from news-ma.rhein-neckar.de (news-ma.rhein-neckar.de [193.197.90.3]) by hub.freebsd.org (Postfix) with ESMTP id 98111151F9 for ; Sun, 19 Dec 1999 18:00:10 -0800 (PST) (envelope-from daemon@bigeye.rhein-neckar.de) Received: from bigeye.rhein-neckar.de (uucp@localhost) by news-ma.rhein-neckar.de (8.8.8/8.8.8) with bsmtp id DAA02585 for freebsd-questions@freebsd.org; Mon, 20 Dec 1999 03:00:09 +0100 (CET) (envelope-from daemon@bigeye.rhein-neckar.de) Received: (from daemon@localhost) by bigeye.rhein-neckar.de (8.9.3/8.9.3) id CAA21621 for freebsd-questions@freebsd.org; Mon, 20 Dec 1999 02:59:29 +0100 (CET) (envelope-from daemon) From: naddy@mips.rhein-neckar.de (Christian Weisgerber) Subject: Re: Who do you run backups as? Date: 20 Dec 1999 02:59:29 +0100 Message-ID: <83k2i1$l37$1@bigeye.rhein-neckar.de> References: <000c01bf4a79$2d4f4050$230a0cd0@SHURIKEN> MIME-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit To: freebsd-questions@freebsd.org Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG Marc Wandschneider wrote: > currently, I'm running tape backups (dump) as root. Nothing wrong with that. However, if you want to allow somebody to take backups but don't want to trust (burden) him with root privileges, you can do without. > Question: Any reason they shouldn't be run as root? How does said > non-root user still get permission to read all the files on all the file > systems? Any user who is member of the "operator" group can run dumps. dump(8) doesn't go through the normal file API but rather reads UFS filesystems directly by way of the raw device. If you check your /dev, you'll see that disk nodes are readable for group operator, and tape devices are writable. -- Christian "naddy" Weisgerber naddy@mips.rhein-neckar.de To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message