On Mon, Nov 2, 2015 at 3:05 AM, Petr Spacek <pspacek@redhat.com> wrote:

Generally principle of least privileges is okay, so I agree with your proposal
in general.

On the other hand I have to ask if the server must be running under root?
Shoudn't it run under a dedicated user, e.g. 'aribackup'?

In that case filesystem permissions should be root:aribackup 770.

Hmm... I don't know why I didn't think of that as a long time BackupPC user...

So a  user could be setup but would they need to be setup as a sudo'er like BackupPC? 

Thanks,
Richard