topic backing up configuration and pulling file to different location in Firewall and Security Management

backing up configuration and pulling file to different location

Bill_Ng — Thu, 17 Sep 2020 13:38:05 GMT

All,

We’d like to setup a system where our MoveIT server will be able to pull our gateway config backups. Is there a way for us to create a Local account with only access /var/log/CPbackup/backups? If possible we would like restrict this account to only pull from the folder. Which roles would be required to do so if possible to do so?

Thanks,

Bill

Re: backing up configuration and pulling file to different location

Danny — Thu, 17 Sep 2020 13:41:46 GMT

First you'll want to create a scponly user.

Re: backing up configuration and pulling file to different location

scottikon — Thu, 17 Sep 2020 15:50:38 GMT

Alternatively, could you write a script that scps files from /var/log/CPbackup/backups to your server and then crontab that script to run periodically?

Re: backing up configuration and pulling file to different location

Bill_Ng — Thu, 17 Sep 2020 19:13:04 GMT

Can this be isolated to /var/log/CPbackup/backups folder?

Re: backing up configuration and pulling file to different location

PhoneBoy — Sun, 20 Sep 2020 20:52:41 GMT

What you’re describing would be best achieved through use of a chroot jail.
While I’m not sure you can execute these exact steps on Gaia OS, this outlines the basic process.
Create the users and groups using standard Gaia OS commands using scponly shell.

https://passingcuriosity.com/2014/openssh-restrict-to-sftp-chroot/