> "updatedb" script runs as nobody a lot of files can't be indexed because
> nobody hasn't the right
> to view all system files.
And that is a good thing. The locate-database is public. It must not
contain data that is not public, i.e. contents of directories that
cannot be listed by non-privileged users.
** Changed in: findutils (Ubuntu)
Status: New => Invalid
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to findutils in Ubuntu.
https://bugs.launchpad.net/bugs/1681103
Title:
/etc/cron.daily/locate script runs as wrong user
Status in findutils package in Ubuntu:
Invalid
Bug description:
The /etc/cron.daily/locate script runs as wrong user. In the package
the line says LOCALUSER="nobody" but it should be LOCALUSER="root"
because if the "updatedb" script runs as nobody a lot of files can't
be indexed because nobody hasn't the right to view all system files.
The information I should provide regarind the guidelines
# lsb_release -rd
Description: Ubuntu 16.04.2 LTS
Release: 16.04
# apt-cache policy locate
locate:
Installed: 4.6.0+git+20160126-2
Candidate: 4.6.0+git+20160126-2
Version table:
*** 4.6.0+git+20160126-2 500
500 http://mirror.hetzner.de/ubuntu/packages xenial/universe amd64
Packages
500 http://de.archive.ubuntu.com/ubuntu xenial/universe amd64 Packages
100 /var/lib/dpkg/status
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/findutils/+bug/1681103/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : touch-packages@lists.launchpad.net
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
