https://bugzilla.novell.com/show_bug.cgi?id=847801
https://bugzilla.novell.com/show_bug.cgi?id=847801#c5
Karl Eichwalder
Yea I added mlocate as replacement for findutils because it is way faster in both search and logging.
FWIW the group issue should be solved but I am bit torn about the solution.
The more it mimics locate, the better ;) As long as it is mostly similar to locate, we do not need a release notes entry. If if would hide more than locate, we should probably provide a release notes snippet telling the user how he can work around the restriction.
1) Upstream uses sgid which lets you to read the whole file and determine what you can see and what not. And our security won't let this happen altho all other distros just go with it and are happy about :( 2) We have the group while locate command itself does not show files you can't access you still can read the db file completely because you are in the group. 3) We can reduce the scope of usability to index only as nobody:nobody and thus allow everyone to read our file, but then nothing of importance would be there which severly impacts the actual usability of the thing.
Ok, unfortunately, I cannot decide about it. I personally would vote to make all the files available to the user that he could see using 'find' ;) -- Configure bugmail: https://bugzilla.novell.com/userprefs.cgi?tab=email ------- You are receiving this mail because: ------- You are on the CC list for the bug.