Re: Default: insecure

[Richard Gooch <rgooch@xxxxxxxxxxxxxxx>]

Pascal Bourguignon writes:
> > From: Robert Siemer <Robert.Siemer@xxxxxx>
> > [...]
> > But how do you protect tape users from other users accessing their
> > tape during backup (... or just before)?
> 
> What about using flock on the tape devices? Wouldn't this work?

Not needed to protect against other openers (only one open at a time
is allowed). And flocks are lost when you close the file descriptor.
Also, flocks are advisory only (in general).

> On the other hand, if the tapes belong to their users, then the device
> should  be  assigned  to  the  proper  owner as  soon  as  a  tape  is
> (physically) mounted on  it. I don't know any mechanism  in unix to do
> that other than "chown $USER $TAPEDEVICE" before mounting the tape.
> 
> The question is: How do you assign a tape device to a user?

chown(2).

                                Regards,

                                        Richard....
Permanent: rgooch@xxxxxxxxxxxxx
Current:   rgooch@xxxxxxxxxxxxxxx