diff options
Diffstat (limited to 'rdiff-backup/rdiff_backup/Security.py')
| -rw-r--r-- | rdiff-backup/rdiff_backup/Security.py | 29 |
1 files changed, 18 insertions, 11 deletions
diff --git a/rdiff-backup/rdiff_backup/Security.py b/rdiff-backup/rdiff_backup/Security.py index 83ddcf2..9254a0c 100644 --- a/rdiff-backup/rdiff_backup/Security.py +++ b/rdiff-backup/rdiff_backup/Security.py @@ -116,7 +116,9 @@ def set_allowed_requests(sec_level): "Log.log_to_file", "SetConnections.add_redirected_conn", "RedirectedRun", - "sys.stdout.write"] + "sys.stdout.write", + "robust.install_signal_handlers", + "Hardlink.initialize_dictionaries"] if sec_level == "minimal": pass elif sec_level == "read-only" or sec_level == "update-only": allowed_requests.extend( @@ -125,23 +127,28 @@ def set_allowed_requests(sec_level): "os.getuid", "os.listdir", "Time.setcurtime_local", - "robust.Resume.ResumeCheck", - "backup.SourceStruct.split_initial_dsiter", - "backup.SourceStruct.get_diffs_and_finalize", "rpath.gzip_open_local_read", "rpath.open_local_read"]) + if sec_level == "read-only": + allowed_requests.extend( + ["restore.MirrorStruct.set_mirror_and_rest_times", + "restore.MirrorStruct.initialize_rf_cache", + "restore.MirrorStruct.get_diffs", + "backup.SourceStruct.set_source_select", + "backup.SourceStruct.get_source_select", + "backup.SourceStruct.get_diffs"]) if sec_level == "update-only": allowed_requests.extend( - ["Log.open_logfile_local", "Log.close_logfile_local", - "Log.close_logfile_allconn", "Log.log_to_file", - "log.Log.log_to_file", + ["log.Log.open_logfile_local", "log.Log.close_logfile_local", + "log.ErrorLog.open", "log.ErrorLog.isopen", + "log.ErrorLog.close", "robust.SaveState.init_filenames", "robust.SaveState.touch_last_file", - "backup.DestinationStruct.get_sigs", - "backup.DestinationStruct.patch_w_datadir_writes", - "backup.DestinationStruct.patch_and_finalize", - "backup.DestinationStruct.patch_increment_and_finalize", + "backup.DestinationStruct.set_rorp_cache", + "backup.DestinationStruct.get_sigs", + "backup.DestinationStruct.patch_and_increment", "Main.backup_touch_curmirror_local", + "Main.backup_remove_curmirror_local", "Globals.ITRB.increment_stat", "statistics.record_error", "log.ErrorLog.write_if_open"]) |