-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On Wednesday, 2013-06-19 at 06:47 -0700, Linda Walsh wrote:
Linda Walsh wrote:
Because the security didn't review the sgid bit on the mlocate for 2 years. The alternative is this.
Um... security did this?
Before, with the sgid bit set, no one could read the values in the mlocatedb. Now anyone who is in the group locate (which is anyone who wants to use locate), can read that file.
Anybody in the group can read the file, but they can only locate the files they have permissions to find. Thus, a guest can not find my personal files. This is good. - -- Cheers, Carlos E. R. (from 12.3 x86_64 "Dartmouth" at Telcontar) -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.19 (GNU/Linux) iEYEARECAAYFAlHCxboACgkQtTMYHG2NR9Um8wCeLpT/s5GiCiNec0T8uCSefJ6o QG4AnRstg0q3HAIacst2GjSN0orMRoL/ =zMax -----END PGP SIGNATURE----- -- To unsubscribe, e-mail: opensuse-factory+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse-factory+owner@opensuse.org