Skip to Content.
Sympa Menu

sm-discuss - Re: [SM-Discuss] Anyone interested in a mlocate spell?

sm-discuss AT lists.ibiblio.org

Subject: Public SourceMage Discussion List

List archive

Chronological Thread  
  • From: Robert Figura <rfigura AT aubergine.zwischengesicht.de>
  • To: seth AT swoolley.homeip.net
  • Subject: Re: [SM-Discuss] Anyone interested in a mlocate spell?
  • Date: Tue, 11 Nov 2008 19:14:07 +0100
  • Resent-date: Tue, 11 Nov 2008 22:37:19 +0100
  • Resent-from: Robert Figura <rfigura AT aubergine.zwischengesicht.de>
  • Resent-to: sm-discuss AT lists.ibiblio.org

seth AT swoolley.homeip.net wrote:
> On Tue, Nov 11, 2008 at 07:36:04AM +0000, Ethan Grammatikidis wrote:
> > It may be complicated, but the locate bundled with findutils is not
> > appropriate for some systems. It shows the existence of files that a
> > user should not ordinarily be able to see. Mlocate, being derived from
> > slocate (secure locate), doesn't have this issue. Also I remember
> > findutils locate being noticably slower at searching the database than
> > slocate, but I may be going back to when findutils depended on perl.
>
> So you've identified a possible security issue. Keep this in mind.

It's only a security issue if you decide to use updatedb ;^)

Not sure wether we should warn inexperienced admins... maybe yes...

I may not grok this correctly but removing the locate binary install
merely seems to be something to make it compatible with mlocate.

Just my 2c,
Regards
Robert Figura

--
/* mandlsig.c 0.42 (c) by Robert Figura */
I=1702;float O,o,i;main(l){for(;I--;putchar("oO .,\nt>neo.ckgel-t\
agidif@<ra urig FrtbeRo"[I%74?I>837&874>I?I^833:l%5:5]))for(O=o=l=
0;O*O+o*o<(16^l++);o=2*O*o+I/74/11.-1,O=i)i=O*O-o*o+I%74*.04-2.2;}




Archive powered by MHonArc 2.6.24.

Top of Page