Create user with Backup access only (no restore) OR secure backup solution.
-
I was wondering if there is a way to create a pfSense user that only has the ability to backup. I don't want them to be able to restore a backup. I'm create a user specifically to use with pfSenseBackup v2.0, and I don't want them to be able to do anything else other than backup. Unfortunately, as far as I can tell, it seems they combined backup and restore permission in pfSense.
Is there a way to restrict access to backup only?
Thanks.
UPDATE: OR has anyone found a secure way to backup the firewall to a Windows machine without using a plain text password, or giving the backup user root access? I suspect I should be able to do something with "Authorized keys" under by backup user.
-
I Probably could separate the 2 functions through some trial and error and define a new privilege for whichever portion is removed from original.
Only problem is I wouldn't be able to make it only able to save with a predefined password for encrypting it.