AIX 6 加密文件系统（Encrypted File System），第 6 部分：备份与恢复

核心提示： 场景 2 在这个场景中，我们将介绍如何对以非文件属主的身份进行备份的文件进行恢复，AIX 6 加密文件系统（Encrypted File System），第 6 部分：备份与恢复(5)，如示例 3 中所示：该文件由 user2 所拥有，他或者她是唯一可以访问该文件的用户， 成功地执行了恢复

场景 2

在这个场景中，我们将介绍如何对以非文件属主的身份进行备份的文件进行恢复，如示例 3 中所示：

该文件由 user2 所拥有。他或者她是唯一可以访问该文件的用户。

甚至连 root 都不能够访问该文件、对其进行存档。

为 root 授予对该文件的访问权限。

备份命令成功执行。存档文件由 root 所拥有。

成功地执行了恢复命令。成功地恢复了文件属性和访问密钥。

为 user5 授予访问权限。

备份命令成功执行。该存档文件由 user5 所拥有。

成功地执行了恢复命令。所创建的文件具有相同的权限和相同的访问密钥，但是由 user5 所拥有。

示例 3 恢复其他用户所拥有的文件

user2@guadalupe/]l -alU
total 40
drwxrwxrwxe 3 root system 4096 May 08 12:22 .
drwxr-xr-x- 22 root system 4096 May 07 22:07 ..
-rw-r--r--e 1 user2 staff 13 May 08 12:17 file
drwxr-xr-x- 2 root system 256 May 03 15:46 lost+found
user2@guadalupe/]efsmgr -l file
EFS File information:
Algorithm:AES_128_CBC
List of keys that can open the file:
Key #1:
Algorithm :RSA_1024
Who :uid 204
Key fingerprint :047dcbd4:f7528784:44488eab:7420d4f2:af3e8bee
root@guadalupe/]ls file|backup -ivZf archive
Mount volume 1 on archive.
Press Enter to continue.
Backing up to archive.
Cluster 51200 bytes (100 blocks).
Volume 1 on archive
backup:0511-449 An error occurred accessing file:Security
authentication is denied.
The total size is 0 bytes.
Backup finished on Tue May 8 12:34:41 CDT 2007; there are 100 blocks on 1 volumes.
user2@guadalupe/]efsmgr -a file -u root
root@guadalupe/]ls file|backup -ivZf archive
Mount volume 1 on archive.
Press Enter to continue.
Backing up to archive.
Cluster 51200 bytes (100 blocks).
Volume 1 on archive a 4096 file
The total size is 4096 bytes.
Backup finished on Tue May 8 12:32:55 CDT 2007; there are 100 blocks on 1 volumes.
root@guadalupe/]restore -xvf archive
Please mount volume 1 on archive.
Press the Enter key to continue.
New volume on archive:
Cluster size is 51200 bytes (100 blocks).
The volume number is 1.
The backup date is:Tue May 8 13:37:16 CDT 2007
Files are backed up by name.
The user is root.
x 4096 file
The total size is 4096 bytes.
The number of restored files is 1.
root@guadalupe/]ls -alU file
-rw-r--r--e 1 user2 staff 13 May 08 13:34 file
root@guadalupe/]efsmgr -l file
EFS File information:
Algorithm:AES_128_CBC
List of keys that can open the file:
Key #1:
Algorithm :RSA_2048
Who :uid 0
Key fingerprint :3ea8581e:16982aa8:dfec5c5a:f02251f1:cfca0445
Key #2:
Algorithm :RSA_1024
Who :uid 204
Key fingerprint :047dcbd4:f7528784:44488eab:7420d4f2:af3e8bee
user2@guadalupe/]efsmgr -a file -u user5
user2@guadalupe/]efsmgr -l file
EFS File information:
Algorithm:AES_128_CBC
List of keys that can open the file:
Key #1:
Algorithm :RSA_1024
Who :uid 204
Key fingerprint :047dcbd4:f7528784:44488eab:7420d4f2:af3e8bee
Key #2:
Algorithm :RSA_1024
Who :uid 207
Key fingerprint :49e42532:e8c471bf:2be9ba03:3f9d12b4:4ba01cea
user5@guadalupe/]ls file|backup -ivZf archive_user
Mount volume 1 on archive_user.
Press Enter to continue.
Backing up to archive_user.
Cluster 51200 bytes (100 blocks).
Volume 1 on archive_user a 4096 file
The total size is 4096 bytes.
Backup finished on Tue May 8 13:50:16 CDT 2007; there are 100 blocks on 1 volumes.
user5@guadalupe/]ls -al
total 152
drwxrwxrwx 3 root system 4096 May 08 13:50 .
drwxr-xr-x 22 root system 4096 May 07 22:07 ..
-rw-r--r-- 1 user5 staff 51200 May 08 13:50 archive_user
-rw-r--r-- 1 user2 staff 13 May 08 13:34 file
drwxr-xr-x 2 root system 256 May 03 15:46 lost+found
user5@guadalupe/]restore -xvf archive_user
Please mount volume 1 on archive_user.
Press the Enter key to continue.
New volume on archive_user:
Cluster size is 51200 bytes (100 blocks).
The volume number is 1.
The backup date is:Tue May 8 13:50:16 CDT 2007
Files are backed up by name.
The user is root.
x 4096 file
The total size is 4096 bytes.
The number of restored files is 1.
user5@guadalupe/]ls -al total 168
drwxrwxrwx 3 root system 4096 May 08 13:51 .
drwxr-xr-x 22 root system 4096 May 07 22:07 ..
-rw-r--r-- 1 user5 staff 51200 May 08 13:50 archive_user
-rw-r--r-- 1 user5 staff 13 May 08 13:34 file
drwxr-xr-x 2 root system 256 May 03 15:46 lost+found
user5@guadalupe/]efsmgr -l file
EFS File information:
Algorithm:AES_128_CBC
List of keys that can open the file:
Key #1:
Algorithm :RSA_1024
Who :uid 204
Key fingerprint :047dcbd4:f7528784:44488eab:7420d4f2:af3e8bee
Key #2:
Algorithm :RSA_1024
Who :uid 207
Key fingerprint :49e42532:e8c471bf:2be9ba03:3f9d12b4:4ba01cea