I have a central
backup server running Debian which holds backups of various other hosts in the network, stored in a structure like
wiki being hosts on our network. Right now, all files beneath
/media/backup are owned by
0750 permissions. What's annoying about this is that
- Every member of the
backupuser group can read all backups, including those of sensitive data (say: mails).
- Right now one of the administrator accounts (
jim@backup) is used for restoring the backups. It's annoying that this functionality is bound to a particular user.
Does this setup make sense? If it doesn't, what's a better approach for organizing backups? One solution I've been considering is to have different system users per host, so there's e.g.
wiki@backup. The files beneath
/media/backup/imap would then be owned by