From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from pigeon.gentoo.org ([208.92.234.80] helo=lists.gentoo.org) by finch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1ROvLI-00024q-KF for garchives@archives.gentoo.org; Fri, 11 Nov 2011 17:56:44 +0000 Received: from pigeon.gentoo.org (localhost [127.0.0.1]) by pigeon.gentoo.org (Postfix) with SMTP id 2F9EE21C063; Fri, 11 Nov 2011 17:56:34 +0000 (UTC) Received: from mail-ey0-f181.google.com (mail-ey0-f181.google.com [209.85.215.181]) by pigeon.gentoo.org (Postfix) with ESMTP id A180921C029 for ; Fri, 11 Nov 2011 17:55:35 +0000 (UTC) Received: by eyx24 with SMTP id 24so3940624eyx.40 for ; Fri, 11 Nov 2011 09:55:34 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; bh=y0LCIpM4SteYcWNvI67QM3ibpfV3ch8DPTF56mjwohQ=; b=MiPUXOMwwf0fbPtu6dncAWyS2H8TcvFffPRujivlLNz1TNcC9EWj0r30HGeVoqfRtb mqjtbInDpJ5qyf7KwnAtNgiJiopEizVgc6StOf9VWtZLDAGYYsSnV65yJ274DAdfMBRk Fd6E0naLNHfFD76n75X2EE6jZ/FQwkmQqO9pk= Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@lists.gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 Received: by 10.213.26.15 with SMTP id b15mr131639ebc.133.1321034134266; Fri, 11 Nov 2011 09:55:34 -0800 (PST) Received: by 10.213.2.198 with HTTP; Fri, 11 Nov 2011 09:55:34 -0800 (PST) Date: Fri, 11 Nov 2011 09:55:34 -0800 Message-ID: Subject: [gentoo-user] {OT} Are "push" backups flawed? From: Grant To: Gentoo mailing list Content-Type: text/plain; charset=ISO-8859-1 X-Archives-Salt: 668e2401-1cb2-495c-8e00-eb29a8ae0d21 X-Archives-Hash: 2106a66bbd29783fb7691c98c1638f91 A little while ago I set up an automated backup system to back up the data from 3 machines to a backup server. I decided to use a push-style layout where the 3 machines push their data to the backup server. Public SSH keys for the 3 machines are stored on the backup server and restricted to the rdiff-backup command. Each of the 3 machines pushes their data to the backup server as a different user and the top directory of each backup is chmod 700 to prevent any of the 3 machines from reading or writing a backup from another machine. I've run into a problem with this layout that I can't seem to solve, and I'm wondering if I should switch to a pull-style layout where the backup server pulls data from each of the 3 machines. The problem with my current push-style layout is that if one of the 3 machines is compromised, the attacker can delete or alter the backup of the compromised machine on the backup server. I can rsync the backups from the backup server to another machine, but if the backups are deleted or altered on the backup server, the rsync'ed copy on the next machine will also be deleted or altered. If I run a pull-style layout and the backup server is compromised, the attacker would have root read access to each of the 3 machines, but the attacker would already have access to backups from each of the 3 machines stored on the backup server itself so that's not really an issue. I would also have the added inconvenience of using openvpn or ssh -R for my laptop so the backup server can pull from it through any router. What do you think guys? Are push-style backups flawed and unacceptable? - Grant