[rsbac] Suggestions with backups

Javier J. Martínez Cabezón tazok.id0 at gmail.com
Tue Jan 13 17:47:12 CET 2009


Hi, If you don't like the time spent restoring your rsbac backup
policy you could for example remove the lines with the DEFAULT pax
FLAGS from your script (at least until one more efficient method would
being developed).

My backup script has almost 231000 lines of commands, from them more
than 200000 has files with the default pax_flags (those specified in
the .config).
With a simple sed you can erase them:

sed '/pax_flags PeMRXS' /d mybackup > backupd_aftersed
Change PeMRXS by your default PaX flags.

Before sed, restoring the policy (and still running) spend 28 minutes,
restoring with after sed 27 seconds. :-) (is something like to send
your backups to /dev/null but without losing information :) ).
Could be useful an option in backup_all to permit avoid the backup of
default values don't you think?


More information about the rsbac mailing list