TheArchive/restic
1
0
Fork 0
mirror of https://github.com/restic/restic.git synced 2025-08-25 02:17:27 +00:00
Code Issues Packages Projects Releases Wiki Activity

Prepare changelog for 0.15.0

Browse Source
This commit is contained in:
Alexander Neumann
2023-01-12 20:50:44 +01:00
parent 0c5a55d1bd
commit cd2f53e3f9
39 changed files with 0 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

19
changelog/0.15.0_2023-01-12/issue-2134 Normal file
View File

@@ -0,0 +1,19 @@
Enhancement: Support B2 API keys restricted to hiding but not deleting files
When the B2 backend does not have the necessary permissions to permanently
delete files, it now automatically falls back to hiding files. This allows
using restic with an application key which is not allowed to delete files.
This can prevent an attacker from deleting backups with such an API key.
To use this feature create an application key without the `deleteFiles`
capability. It is recommended to restrict the key to just one bucket.
For example using the `b2` command line tool:
`b2 create-key --bucket <bucketName> <keyName> listBuckets,readFiles,writeFiles,listFiles`
Alternatively, you can use the S3 backend to access B2, as described
in the documentation. In this mode, files are also only hidden instead
of being deleted permanently.
https://github.com/restic/restic/issues/2134
https://github.com/restic/restic/pull/2398