Re: feature(?) in locate

[Ian Zimmerman]

>>>>> "Andrew" == Andrew Comech <address@hidden> writes:

Andrew> Hi, I was wondering whether the following is a bug or feature
Andrew> of locate:

[...]

Andrew> Formally, this seems to be a security violation, although I
Andrew> have no idea how this could be exploited.  (To patch it,
Andrew> perhaps one might change `locate' so that when the user calls
Andrew> it, it would match the filenames from its database against the
Andrew> directories' permissions, before printing the names to the
Andrew> user... this would require some work, because one might then
Andrew> call locate with strace..  I just do not have a slightest idea
Andrew> about all this.)

Hi, try to search for "slocate", it solves this problem (if it is a
problem). 

-- 
Ian Zimmerman, Oakland, California, U.S.A.
EngSoc adopts market economy: cheap is wasteful, efficient is expensive.