I'm currently in the process of "designing" my personal (Linux-based) IT, specifically backups.
I've got a few servers which generate data worth backing up (databases, files, etc.) and would like to put these in a central backup location (which is again backed up somewhere else).
Currently I'm having thoughts on security: What happens if a machine gets owned?
Originally I planned to have all the systems use the same backup user, but this turns out to be a problem: If one of the clients gets owned, he can change arbitrary other backup data.
I'm considering creating one backup user per data source I have. Since the number of data sources I have is fairly constant, this isn't a problem for me. However I feel like I am violating the DRY principle: Surely someone somewhere already thought of this problem, are there any enterprise/well-known tools I've overseen? Or is there an entirely different way I could implement this?
chattr +i
) can be removed later. Maybechown
ing them all to root (or a second user) works, but that feels like a hack to me.