Granular sudo Permissions Required for Management of Linux-base Tape Server
KB ID:
4558
Product:
Veeam Backup & Replication | 12.1
Published:
2024-03-11
Last Modified:
2024-03-11
Get weekly article updates
By subscribing, you are agreeing to have your personal information managed in accordance with the terms of Veeam's Privacy Notice.
Cheers for trusting us with the spot in your mailbox!
Now you’re less likely to miss what’s been brewing in our knowledge base with this weekly digest
Oops! Something went wrong.
Please, try again later.
Purpose
This article provides an example of a granular ‘sudo’ configuration for the Linux account that Veeam Backup & Replication will use when managing a Linux-based Tape Server.
Solution
The Linux user account used by Veeam Backup & Replication to connect to the Linux-based Tape Server use the bash shell.
The Linux account must have either root or root-equivalent permissions. In the latter case, some administrators may prefer to restrict the account used by Veeam Backup & Replication to execute only a specific required list of commands as a sudoer on the target Linux machine. (See example below.)
# Set rights restricteduser ALL=(root) /bin/chown -hR root /opt/veeam/deployment restricteduser ALL=(root) /bin/find /opt/veeam/deployment -type d restricteduser ALL=(root) /bin/chmod 755 /opt/veeam/* restricteduser ALL=(root) /bin/find /opt/veeam/deployment -type f -not -path /opt/veeam/deployment/veeamdeploymentsvc restricteduser ALL=(root) /bin/chmod 644 /opt/veeam/deployment/* restricteduser ALL=(root) /bin/chmod 744 /opt/veeam/deployment/veeamdeploymentsvc
To submit feedback regarding this article, please click this link: Send Article Feedback
To report a typo on this page, highlight the typo with your mouse and press CTRL + Enter.
Spelling error in text
Thank you!
Your feedback has been received and will be reviewed.