Home / server / Questions / 452140
In Process
Thomas Einwaller
Asked: 2012-11-27 02:39:09 +0800 CST

configure s3fs mount for write-only

  • 772

I am using s3fs to mount a S3 buckets on an Ubunutu server to store my daily backups there.

Considering security this would allow a potential hacker to delete all my backups from the mounted bucket.

Is there a way to prohibit that? Maybe mounting the bucket for write-only but not for deleting?

ubuntu

1 Answers

  1. You should enable S3 buckets versioning:

    Versioning offers an additional level of protection by providing a means of recovery when customers accidentally overwrite or delete objects. This allows you to easily recover from unintended user actions and application failures.

    I would also recommend you take a look at my project: RiFS, a userspace filesystem to mount Amazon S3 buckets. Our project is an alternative to “s3fs” project, main advantages comparing to “s3fs” are: simplicity, the speed of operations and bugs-free code. Currently the project is in the “beta” state, but it's been running on several high-loaded fileservers for quite some time.

    Hope it helps !

    • 0