On Tue, Apr 25, 2000 at 01:01:37PM -0700, kmself@ix.netcom.com wrote: > > If you're going to do this -- and I would consider it a security hole -- > hint: anyone cracking your box now can find what's in files -- > I'd recommend dumping the results to a root-owned file, readable only by > root, and writing a wrapper, script, or program to search it, seperately > from the "locate" command. Or, install slocate. It builds the database as root, but only shows the files that the user running the locate command has permission to see. For example: (i added the arrow, of course) # ls /root/nvi /root/nvi # locate nvi | grep "nvi$" -> /root/nvi /usr/doc/nvi /usr/share/doc/nvi /usr/bin/nvi # $ ls /root/ ls: /root/: Permission denied $ locate nvi | grep "nvi$" /usr/doc/nvi /usr/share/doc/nvi /usr/bin/nvi $ -- finger for GPG public key.
Attachment:
pgpN24nYfCkqL.pgp
Description: PGP signature