Re: new debian buster install, missing /etc/amanda-security.conf file

On Thursday 04 February 2021 16:28:14 Debra S Baddorf wrote:

> > On Feb 4, 2021, at 2:49 PM, Alan Hodgson <[email protected]>
> > wrote:
> >
> > On Thu, 2021-02-04 at 15:36 -0500, Gene Heskett wrote:
> >> Greetings all;
> >>
> >> Updating both to newer hardware for machines and installing debian
> >> buster, but amcheck says that the /etc/amanda-security.conf file
> >> won't let me run tar as root, but the real problem is that
> >> the /etc/amanda-security.conf file does not exist.
> >>
> >> Who owns it, I assume its 0600 for perms, and whats it supposed to
> >> say?
> >>
> >> Thanks everybody.
> >>
> >> Cheers, Gene Heskett
> >
> > Not a Debian system, but:
> >
> > hades ~ # ls -l /etc/amanda-security.conf
> > -rw-r--r-- 1 root amanda 56 Sep 20  2016 /etc/amanda-security.conf
> >
> > hades ~ # cat /etc/amanda-security.conf
> > amgtar:gnutar_path:/bin/tar
> > runtar:gnutar_path:/bin/tar
> >
> > There's also a manpage for it on my systems.
>
> Contents on my machines:  (can be entirely commented out; that’s how
> it starts)

edited for buster below.

> ========  amanda-security.conf  ============
> ############################################################
> # /etc/amanda-security.conf                                #
> #                                                          #
> # See: man amanda-security.conf                            #
> #                                                          #
> # This file must be installed at /etc/amanda-security.conf #
> #                                                          #
> # It list all executables amanda can execute as root.      #
> # This file must contains realpath to executable, with     #
> # all symbolic links resolved.                             #
> # You can use the 'realpath' command to find them.         #
> #                                                          #
> # It list program and a symbolic name for the program      #
> # Followed by the realpath of the binary                   #
> #                                                          #
> # Uncomment and edit the following lines to let Amanda to  #
> # use customized system commands.  If multiple PATH is     #
> # necessary, please put them in different lines.           #
> # e.g.:                                                    #
> # amgtar:GNUTAR_PATH=/usr/bin/tar                          #
> # amgtar:GNUTAR_PATH=/usr/bin/tar-1.28                     #
> #                                                          #
> # If a program and symbolic name is not listed, then the   #
> # configured binary is allowed to be run as root.          #
> # You can find the configured binary with amgetconf        #
> #     amgetconf build.gnutar_path                          #
> #     amgetconf build.star_path                            #
> #     amgetconf build.bsdtar_path                          #
> #                                                          #
> ############################################################
> #runtar:gnutar_path=/bin/tar
amgtar:gnutar_path=/usr/bin/tar
> #amstar:star_path=/usr/bin/star
> #ambsdtar:bsdtar_path=/usr/bin/bsdtar
>
> #restore_by_amanda_user=no

Thanks Deb.

I copied it from another install, then had to edit the amgtar path cuz 
buster moved tar from /bin, to /usr/bin.  So that basket of rattlesnakes 
is sorted.  We'll see what happens tonight.

Copyright 2019 by Maurice E. Heskett
Cheers, Gene Heskett
-- 
"There are four boxes to be used in defense of liberty:
 soap, ballot, jury, and ammo. Please use in that order."
-Ed Howdershelt (Author)
If we desire respect for the law, we must first make the law respectable.
 - Louis D. Brandeis
Genes Web page <http://geneslinuxbox.net:6309/gene>