Re: Security: non-root users may have access to the slocate database
On Tue, Dec 07, 2004 at 10:22:03AM +0100, Vincent Lefevre wrote:
> Any comment on bug 282355?
>
> http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=282355
>
> Some non-root users may have access to the slocate database, hence
> to filenames that are normally accessible only by root. Isn't that
> a security hole?
I agree it is as a security hole, certainly more serious than "wishlist".
I'm not sure which package, nis or slocate, was responsible.
Can you tell us steps to reproduce the bug? If you can give instructions on
how to reproduce it, I'll try to work out how to fix it.
Sam
Reply to: