Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have setup a backup server which pulls data using rsnapshot from my server. rsnapshot is running as root on backup machine and connects to the server via RSA key that has no passphrase. My concern is that this may not be a good securitywise. If attacker gains access to my backup machine, he can compromise my backups and server data too.

The question is How should I do this right?

Another thing I'd like to know is:

How can I track rsnapshot activity, to make sure backup successfully finished and there were no problems?

share|improve this question
add comment

1 Answer 1

I can't answer the "how to track" part of your question, but in regard to backup security: Ensure that all sensitive data is encrypted before leaving the server, and is stored in an encrypted format when it gets to its destination.

The quick, ghetto way of handling this is to just encrypt it after it's all transferred (with gpg or similar).

Production backup software like Bacula can do this for you as a built-in feature...

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.