AMANDA-SECURITY.C(5)

📦
version 3.5.4 · 8 versions
, in fedora 43

💅 AMANDA-SECURITY.CONF(5) — the client config file for Amanda, bestie

okay so real talk: this is amanda-security.conf(5), the security config file for Amanda, and this page is literally just the tour of which sections and parameters live inside it. that's it. that's the vibe. ✨

🎀 DESCRIPTION 🎀

So amanda-security.conf(5) is the security configuration file for Amanda, periodt. This manpage? It lists the relevant sections and parameters of that file, so you know what you're looking at. 💖

The file must be installed at /etc/amanda-security.conf, and only root must be able to write to it. Good permissions are:

It must be readable by the amanda user and owned by root. Good permissions are:

$ ls -l /etc/amanda-security.conf
-rw-r--r--. 1 root root 1994 Jan 29 13:45 /etc/amanda-security.conf

An example file should be installed at /etc/amanda/amanda-security.conf.

All lines with # as the first character are comment lines. 🫶

🦋 SECURE BINARIES 🦋

This is the list of all executables amanda can execute as root — highkey important, so pay attention. The format is as follows:

AMANDA_PROGRAM:SYMBOLIC_NAME=REALPATH_TO_BINARY

This file must contain the realpath to the executable, with all symbolic links resolved. You can use the realpath command to find them — yes, literally that one. 🧚

Multiple lines can be added for the same AMANDA_PROGRAM:SYMBOLIC_NAME if you're using multiple binaries. No cap.

The AMANDA_PROGRAM:SYMBOLIC_NAME can be any of the following:

  • runtar:gnutar_path — the gnutar binary runtar is allowed to run. The default is amgetconf build.gnutar_path. 🌸
  • amgtar:gnutar_path — the gnutar binary amgtar is allowed to run. The default is amgetconf build.gnutar_path.
  • amstar:star_path — the star binary amstar is allowed to run. The default is amgetconf build.star_path. ⭐
  • ambsdtar:bsdtar_path — the bsdtar binary ambsdtar is allowed to run. The default is amgetconf build.bsdtar_path.

👑 OTHERS SECURITY PARAMETERS 👑

like, "others"? yes bestie, that's literally what the section is called. we don't gatekeep. 💅
  • restore_by_amanda_user=[yes|no] — default: no. Set it to yes if you want the amanda user to restore files as root. This is required only if you run amgtar, amstar or ambsdtar as the amanda backup for recovery. 🎀
  • tcp_port_range=int,int — default: no. It must be set to the range of privileged tcp port amanda can use, and it's required for bsdtcp and krb5 auth. The range is inclusive. 🔥

You can find the range you are configured to use with:

amgetconf CONF reserved-udp-port
  • udp_port_range=int,int — default: no. It must be set to the range of privileged udp port amanda can use, and it's required for bsd and bsdudp auth. The range is inclusive. 🌈

You can find the range you are configured to use with:

amgetconf CONF reserved-udp-port

🌟 SEE ALSO 🌟

amanda(8), amanda.conf(5)

The Amanda Wiki: : http://wiki.zmanda.com/ 👑

💜 AUTHOR 💜

Jean-Louis Martineau <martineau@zmanda.com> Zmanda, Inc. (http://www.zmanda.com)

okay that's the whole page, you ate that 💅✨ — this gem is from Amanda 3.5.4, dated 07/23/2025, and it's the AMANDA-SECURITY.C(5) page, mwah 🎀🫶

📦 where this page comes from