Jim Li wrote:
> Darren J Moffat wrote:
>>>> So what is the ownership and permissions of /var/lib/slocate/slocate.db
>>>>
>>> The ownership is root, group is other and permissions is 744
>>
>> The above check is completely useless given that that database is 
>> publically readable.  Also it should't be rwx for owner it doesn't get 
>> executed it should be rw-.
>>
>> This is why slocate is normally installed SUID or SGID so that the 
>> database can be installed like one of the following:
>>     root  root 600
>>     root  slocate 640
> Understood. Which way is better, SUID(root root 600) or root slocate 640?

root:slocate 640

-- 
Darren J Moffat

Reply via email to