4 ms·
A very good solution here is ZFS. Office file server runs ZFS and makes regular ZFS snapshots (hourly, or more often). Snapshots are immutable so even if the em
by jjav 7y ago
A very good solution here is ZFS. Office file server runs ZFS and makes regular ZFS snapshots (hourly, or more often). Snapshots are immutable so even if the employee machines get infected, nothing can be lost (except the last N minutes since the last snapshot).
Obviously, still have to do backups (off of those snapshots).
- eeZah7Ux 7y ago> Snapshots are immutable so even if the employee machines get infected Not really. You can easily extract data and overwrite the disk surface.
- jjav 7y agoNot from the machines which typically get infected, which are the employee desktops accessing the file server. If the malware manages to get itself running on the file server itself (and with root privileges), then sure. That's not a common case though.
- amelius 7y agoWhat if the malware puts itself between the hardware and the filesystem?
- equalunique 7y agoI absolutely love ZFS, but I think it's only a piece of the puzzle necessary for mitigating this threat. In terms of data integrity, I sure hope no system running ZFS would have it's snapshots also corrupted, but if that did happen, then hopefully those ZFS snapshots would have been backed up to some offline media like tape or optical disk. Example: http://girlyngeek.blogspot.com/2014/02/zfs-on-read-only-devices.html http://girlyngeek.blogspot.com/2014/02/zfs-on-read-only-devi...