Home / server / Questions / 448380
Accepted
vy32
Asked: 2012-11-14 13:56:46 +0800 CST

A user that can read any Linux file?

  • 772

We would like to have a network backup system with a user that can read any file on our servers but not write any file. Is there any way to do this under Linux (and specifically Fedora)? We would rather not have a remote root that can erase any file...

linux

2 Answers

  1. Best Answer

    If you export your filesystem via NFS and the ro and no_root_squash option, it can't be modified on the remote system.

    • 6

  2. Short answer: no

    Long answer: in theory, you could set an ACL over your whole filesystem that would allow user X to read everything. But that's pretty tedious. From what I can tell, must backup software runs as root for precisely this reason.

    • 2