-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
On Wednesday, 2013-06-19 at 06:47 -0700, Linda Walsh wrote:
Linda Walsh wrote:
Because the security didn't review the sgid bit on the mlocate for 2 years. The alternative is this.
Um... security did this? Before, with the sgid bit set, no one could read the
values in the mlocatedb. Now anyone who is in the group locate (which is anyone who wants to use locate), can read that file.
Anybody in the group can read the file, but they can only locate the files they have permissions to find. Thus, a guest can not find my personal files.
This is good.
- -- Cheers, Carlos E. R. (from 12.3 x86_64 "Dartmouth" at Telcontar)