On Fri, Sep 09, 2005 at 07:08:19PM +0200, Richard Bos wrote:
> Is rlocate something to be included in a newer suse version?
> 
> rlocate, by Rasto Levrinc, is based on slocate, which is an improvement on 
> traditional locate, rlocate updates its path database in real-time by using a 
> kernel module that intercepts all paths modifications and a daemon that logs 
> those operations on a differences file. The combination of the full path 
> database with the difference file gives you instant updated information on 
> the filesystem. 
>  
> rlocate behaves exactly the same way as slocate or locate does, except that 
> any modification you make to the filesystem is immediately taken in account. 
> For instance: 
>  
> # rlocate new-fresh-file 
>  [nothing-- no matches] 
>  
>  # touch new-fresh-file 
>  # rlocate new-fresh-file 
>  /var/tmp/new-fresh-file 
>  
>  # rm -f /var/tmp/new-fresh-file 
>  # rlocate new-fresh-file 
>  [nothing-- no matches]
> 
> 
> See this article for more:
> http://www.linux.com/print.pl?sid=05/08/31/1441206

I do not really want to look at the kernel module because
I know it will be horrible.

And yes "The ``Default Linux Capabilities'' must be either disabled
or set to 'M' in your kernel configuration in ``Security options''
section. Capability module cannot be loaded at the same time as
rlocate. Disable also NSA SELinux."

You lose any kind of capability based security using this.

So: No way.

They should be using the audit framework which has been introduced in the
last months.

Ciao, Marcus

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to