> The problem is that the host summary page from the CGI script says, 'This PC
> has never been backed up!!' and there is no summary status. There is a
> status line that says 'Last status is state "idle" (backup done) as of 12/30
> 14:11'. Any ideas?
It looks like a permissions problem. The CGI script, BackupPC_Admin,
needs to be able to read the backups file for each PC, stored in
$DataDir/pc/$host/backups. First off, please check that this
file exists, and has sensible contents (one line per backup, lots
of numbers separated by tabs). Second, check that the BackupPC_Admin
is setuid to the backup user, eg:
-rwsr-xr-- 1 backuppc apache 45543 Dec 9 17:10 BackupPC_Admin
^--- setuid bit
This is the most likely problem: either the setuid bit isn't set,
the owner of the file isn't backuppc (or your equivalent), or
for some reason on your system setuid doesn't work with apache.
Thirdly, look carefully at the directory ownership and permissions
on $DataDir/pc, $DataDir/pc/$host and $DataDir/pc/$host/backups.
> You were spot on with your diagnosis, once I had changed the cgi script to
> -rwsr-xr-- 1 backuppc apache 45543 Dec 9 17:10 BackupPC_Admin
> it worked OK.
> After re-reading the documentation I see that it clearly says what needs to
> be done. In my impatience and lack of clear understanding of what setuid
> does I missed it. If I could make a suggestion, adding the line above (from
> ls) to the documentation would be helpful.
> A useful tool would be a script that goes through the permissions of the
> various directories and files and checks them. It could also check for
> potential security holes. Beside catching problems like the one above it
> would also give relative newbies to linux, like myself, more confidence that
> we have not forgotten some setting that could expose the system.
Yes, I was also thinking about writing a security audit script that runs
through a checklist. I'll add it to the todo list. I'll probably have
a link on the CGI interface so administrators can run it from there too.
> Thanks for a great bit of software, it is just what I have been looking for.
Thanks for the feedback!