NetBackup™ Upgrade Guide
- Introduction
- About changes in NetBackup 10.4
- Planning for an upgrade
- General upgrade planning information
- About upgrade tools
- Upgrade operational notes and limitations
- General upgrade planning information
- Primary server upgrade
- Media server upgrade
- MSDP upgrade for NetBackup
- Client upgrade
- NetBackup Deployment Management with VxUpdate
- Appendix A. Reference
Unified logging security update
During an upgrade to NetBackup 10.0.0.1, the permissions on the unified log directories and files are set to a more restrictive level. This change is designed to prevent unauthorized access to the NetBackup logs, which may contain sensitive information.
You can change log file permissions to the less restrictive setting by changing ALLOW_WORLD_READABLE_LOGS to YES. If you want to retain the less restrictive log permissions during the NetBackup 10.0.0.1 upgrade, set ALLOW_WORLD_READABLE_LOGS=YES with the nbsetconfig command before you upgrade.
For UNIX and Linux upgrades, if ALLOW_WORLD_READABLE_LOGS=YES is set in bp.conf
for a server, the log file permissions for nblog.conf
are 644. The permissions for icsul.conf
are not changed since they are already 640. The new permissions are only applied to newly created log files. The permissions of existing log files before upgrade are not changed.
See the NetBackup Commands Reference Guide for assistance with the nbsetconfig command.
See the NetBackup Logging Reference Guide for additional information about the ALLOW_WORLD_READABLE_LOGS value.