'\" t
.\"     Title: amanda-security.conf
.\"    Author: Jean-Louis Martineau <martineau@zmanda.com>
.\" Generator: DocBook XSL Stylesheets v1.78.1 <http://docbook.sf.net/>
.\"      Date: 12/01/2017
.\"    Manual: File formats and conventions
.\"    Source: Amanda 3.5.1
.\"  Language: English
.\"
.TH "AMANDA\-SECURITY\&.C" "5" "12/01/2017" "Amanda 3\&.5\&.1" "File formats and conventions"
.\" -----------------------------------------------------------------
.\" * Define some portability stuff
.\" -----------------------------------------------------------------
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.\" http://bugs.debian.org/507673
.\" http://lists.gnu.org/archive/html/groff/2009-02/msg00013.html
.\" ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
.ie \n(.g .ds Aq \(aq
.el       .ds Aq '
.\" -----------------------------------------------------------------
.\" * set default formatting
.\" -----------------------------------------------------------------
.\" disable hyphenation
.nh
.\" disable justification (adjust text to left margin only)
.ad l
.\" -----------------------------------------------------------------
.\" * MAIN CONTENT STARTS HERE *
.\" -----------------------------------------------------------------
.SH "NAME"
amanda-security.conf \- Client configuration file for Amanda
.SH "DESCRIPTION"
.PP
\fBamanda-security.conf\fR(5)
is the security configuration file for Amanda\&. This manpage lists the relevant sections and parameters of this file\&.
.PP
The file must be installed at
\fB/etc/amanda\-security\&.conf\fR
and only root must be able to write to it\&. Good permission are:
.PP
It must be readable by the amanda user and owned by root\&. Good permissions are:
.nf
$ ls \-l /etc/amanda\-security\&.conf
\-rw\-r\-\-r\-\-\&. 1 root root 1994 Jan 29 13:45 /etc/amanda\-security\&.conf
.fi
.PP
An example file should be installed at
\fB/etc/amanda/amanda\-security\&.conf\fR\&.
.PP
All lines with \*(Aq#\*(Aq as the first character ar comment line\&.
.SH "SECURE BINARIES"
.PP
The list of all executables amanda can execute as root\&. The format is as follow:
.sp
.nf
   AMANDA_PROGRAM:SYMBOLIC_NAME=REALPATH_TO_BINARY
.fi
.PP
This file must contains realpath to executable, with all symbolic links resolved\&. You can use the \*(Aqrealpath\*(Aq command to find them\&.
.PP
Multiple line can be added for the same \*(AqAMANDA_PROGRAM:SYMBOLIC_NAME\*(Aq if you are using multiple binaries\&.
.PP
The \*(AqAMANDA_PROGRAM:SYMBOLIC_NAME\*(Aq can be any of the following:
.PP
runtar:gnutar_path
.RS 4
The gnutar binary runtar is allowed to run\&. The default is `amgetconf build\&.gnutar_path`
.RE
.PP
amgtar:gnutar_path
.RS 4
The gnutar binary amgtar is allowed to run\&. The default is `amgetconf build\&.gnutar_path`
.RE
.PP
amstar:star_path
.RS 4
The star binary amstar is allowed to run\&. The default is `amgetconf build\&.star_path`
.RE
.PP
ambsdtar:bsdtar_path
.RS 4
The bsdtar binary ambsdtar is allowed to run\&. The default is `amgetconf build\&.bsdtar_path`
.RE
.SH "OTHERS SECURITY PARAMETERS"
.PP
restore_by_amanda_user=[yes|no]
.RS 4
Default: no\&. Set to \*(Aqyes\*(Aq if you want the amanda user to restore file as root, required only if you run amgtar, amstar or ambsdtar as the amanda backup for recovery\&.
.RE
.PP
tcp_port_range=int,int
.RS 4
Default: no\&. Must be set to the range of privileged tcp port amanda can use, required for bsdtcp and krb5 auth\&. The range is inclusive
.sp
You can find the range you are configured to use with:
.nf
  amgetconf CONF reserved\-udp\-port
.fi
.RE
.PP
udp_port_range=int,int
.RS 4
Default: no\&. Must be set to the range of privileged udp port amanda can use, required for bsd and bsdudp auth\&. The range is inclusive
.sp
You can find the range you are configured to use with:
.nf
  amgetconf CONF reserved\-udp\-port
.fi
.RE
.SH "SEE ALSO"
.PP
\fBamanda\fR(8),
\fBamanda.conf\fR(5)
.PP
The Amanda Wiki:
: http://wiki.zmanda.com/
.SH "AUTHOR"
.PP
\fBJean\-Louis Martineau\fR <\&martineau@zmanda\&.com\&>
.RS 4
Zmanda, Inc\&. (http://www\&.zmanda\&.com)
.RE