{"id":1528,"date":"2009-12-27T05:39:02","date_gmt":"2009-12-26T19:39:02","guid":{"rendered":"http:\/\/nsrd.wordpress.com\/?p=1528"},"modified":"2009-12-27T05:39:02","modified_gmt":"2009-12-26T19:39:02","slug":"networker-7-6-and-nsr_render_log","status":"publish","type":"post","link":"https:\/\/nsrd.info\/blog\/2009\/12\/27\/networker-7-6-and-nsr_render_log\/","title":{"rendered":"NetWorker 7.6 and nsr_render_log"},"content":{"rendered":"<p>You may recall that in an earlier article, &#8220;<a title=\"Insecuring your logs with nsr_render_log\" href=\"https:\/\/nsrd.info\/blog\/?p=507\" target=\"_blank\">(In)securing your logs using nsr_render_log -z<\/a>&#8220;, I pointed out that the &#8220;-z&#8221; option, advertised as capable of obfuscating host and user details to make the log truly anonymous did, at best, an extremely poor job of doing so and should be considered untrustworthy.<\/p>\n<p>As a result of the discussions I had with EMC support over this, NetWorker 7.6 has seen the &#8220;-z&#8221; option removed from the man page as an option. Disappointingly, it remains available as a command line option, meaning you can still run:<\/p>\n<pre># nsr_render_log -z \/nsr\/logs\/daemon.raw<\/pre>\n<p>Why is this disappointing? Because it&#8217;s still entirely insecure. For example, after running it against my daemon.raw file on a lab server, I&#8217;ve got lines like:<\/p>\n<pre>...host1 nsrjobd SYSTEM error: remote exec problem for command `nsrcheckbackup.sh -s nox\u00a0\n-g archon -c archon \/ \/Volumes\/TARDIS\/Yojimbo \/Volumes\/Yu': No route to host\n...host1 savegrp archon: error occured during probing; could not execute probe job\n...host1 nsrd savegroup failure alert: archon: error occured during probing; could not execute probe job\n...host1 nsrd runq: NSR group archon exited with return code 21.\n...host1 nsrd savegroup info: aralathan is probing<\/pre>\n<p>Furthermore, NetWorker startups will still reveal hostnames in the licensed host list, etc.<\/p>\n<p>As such, despite the fact that the <em>-z<\/em> option is still available within nsr_render_log, my original recommendation remains: <em>don&#8217;t<\/em> use it, <em>don&#8217;t<\/em> rely on it, and if you need to secure (obfuscate) your daemon log, do it <strong>manually<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>You may recall that in an earlier article, &#8220;(In)securing your logs using nsr_render_log -z&#8220;, I pointed out that the &#8220;-z&#8221;&hellip;<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":false,"jetpack_social_options":{"image_generator_settings":{"template":"highway","default_image_id":0,"font":"","enabled":false},"version":2}},"categories":[16,21],"tags":[682,687],"class_list":["post-1528","post","type-post","status-publish","format-standard","hentry","category-networker","category-security","tag-nsr_render_log","tag-obfuscate"],"aioseo_notices":[],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"","jetpack_shortlink":"https:\/\/wp.me\/pKpIN-oE","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/1528","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/comments?post=1528"}],"version-history":[{"count":0,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/posts\/1528\/revisions"}],"wp:attachment":[{"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/media?parent=1528"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/categories?post=1528"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/nsrd.info\/blog\/wp-json\/wp\/v2\/tags?post=1528"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}