I'm running rdiff-backup over ssh with an unattended cron script using an ssh 
key-pair proceedure described here 
(http://arctic.org/~dean/rdiff-backup/unattended.html). My script works fine, 
but I'm wondering about security. It is generally considered a bad idea to 
allow root login to ssh, but I cannot preserve ownership and permissions if I 
disallow root login. 

Is this really a problem since my machines are behind a router on my LAN? The 
ssh key-pairs are not password protected, but isn't the only real security 
threat losing the private key? 

Is there a way to lock this down a bit more while still enabling unattended 
backups? 

thx,
feffer

+----------------------------------------------------------------------
|This was sent by [email protected] via Backup Central.
|Forward SPAM to [email protected].
+----------------------------------------------------------------------



_______________________________________________
rdiff-backup-users mailing list at [email protected]
http://lists.nongnu.org/mailman/listinfo/rdiff-backup-users
Wiki URL: http://rdiff-backup.solutionsfirst.com.au/index.php/RdiffBackupWiki

Reply via email to