From owner-freebsd-questions@FreeBSD.ORG Fri Sep 24 15:50:41 2004 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 973F916A588; Fri, 24 Sep 2004 15:50:41 +0000 (GMT) Received: from post5.inre.asu.edu (post5.inre.asu.edu [129.219.110.120]) by mx1.FreeBSD.org (Postfix) with ESMTP id 5AA1A43D7C; Fri, 24 Sep 2004 15:50:34 +0000 (GMT) (envelope-from David.Bear@asu.edu) Received: from conversion.post5.inre.asu.edu by asu.edu (PMDF V6.1-1X6 #30769) id <0I4J00A01YI3KZ@asu.edu>; Fri, 24 Sep 2004 08:46:51 -0700 (MST) Received: from smtp.asu.edu (smtp.asu.edu [129.219.110.107]) <0I4J00ADGYI35Y@asu.edu>; Fri, 24 Sep 2004 08:46:51 -0700 (MST) Received: from moroni.pp.asu.edu (moroni.pp.asu.edu [129.219.69.200]) (8.12.10/8.12.10/asu_smtp_relay,nullclient,tcp_wrapped) with ESMTP id i8OFkk71012451; Fri, 24 Sep 2004 08:46:46 -0700 (MST) Received: by moroni.pp.asu.edu (Postfix, from userid 500) id CDF24E35; Fri, 24 Sep 2004 08:46:27 -0700 (MST) Received: from post1.inre.asu.edu (post1.inre.asu.edu [129.219.110.72]) by imap1.asu.edu (8.11.0/8.11.0/asu_cyrus,tcp_wrapped) with ESMTP id g3LMfbE29822 for ; Sun, 21 Apr 2002 15:41:37 -0700 (MST) Received: from conversion.post1.inre.asu.edu by asu.edu (PMDF V6.1 #40110) david.bear@asu.edu) ; Sun, 21 Apr 2002 15:41:37 -0700 (MST) Received: from mx2.freebsd.org (mx2.FreeBSD.org [216.136.204.119]) by asu.edu (PMDF V6.1 #40110) with ESMTP id <0GUX00H90WDDTB@asu.edu> for iddwb@IMAP1.ASU.EDU (ORCPT david.bear@asu.edu); Sun, 21 Apr 2002 15:41:37 -0700 (MST) Received: from hub.freebsd.org (hub.FreeBSD.org [216.136.204.18]) by mx2.freebsd.org (Postfix) with ESMTP id 8704255C11; Sun, 21 Apr 2002 15:40:15 -0700 Received: by hub.freebsd.org (Postfix, from userid 538) id E80BD37B41B; Sun, 21 Apr 2002 15:39:59 -0700 (PDT) Received: from localhost (localhost [127.0.0.1]) by hub.freebsd.org (Postfix) with SMTP id E67812E8021; Sun, 21 Apr 2002 15:39:57 -0700 (PDT) Received: by hub.freebsd.org (bulk_mailer v1.12); Sun, 21 Apr 2002 15:39:57 -0700 Received: from obsecurity.dyndns.org (adsl-64-165-226-18.dsl.lsan03.pacbell.net [64.165.226.18]) by hub.freebsd.org (Postfix) with ESMTP id CCF6F37B417; Sun, 21 Apr 2002 15:38:05 -0700 (PDT) Received: by obsecurity.dyndns.org (Postfix, from userid 1000) id 63F2E66C8C; Sun, 21 Apr 2002 15:38:05 -0700 (PDT) From: Kris Kennaway In-reply-to: <"from danm"@prime.gushi.org> Sender: owner-freebsd-security@FreeBSD.ORG To: dwbear75@gmail.com Message-id: <20020421153805.A22029@xor.obsecurity.org> MIME-version: 1.0 Content-type: multipart/signed; micalg=pgp-md5; protocol="application/pgp-signature"; boundary=liOOAslEiF7prFVr Content-disposition: inline Precedence: bulk X-Loop: FreeBSD.org Delivered-to: freebsd-security@freebsd.org Old-To: "Dan Mahoney, System Admin" User-Agent: Mutt/1.2.5.1i Lines: 32 References: <20020421131741.U39364-100000@prime.gushi.org> X-Keywords: cc: questions@FreeBSD.ORG cc: security@FreeBSD.ORG Subject: Re: Locate revealing contents of root:wheel 700 directories X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.1 List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Date: Fri, 24 Sep 2004 15:50:41 -0000 X-Original-Date: Sun, 21 Apr 2002 15:38:05 -0700 X-List-Received-Date: Fri, 24 Sep 2004 15:50:41 -0000 --liOOAslEiF7prFVr Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Sun, Apr 21, 2002 at 01:27:14PM -0400, Dan Mahoney, System Admin wrote: > Hi, I noticed that in freeBSD 4.5, locate shows the contents of all > folders, even in my previously root:wheel 700 directory, /mnt/var/log. Only if you run the locate.updatedb utility as root (i.e. in a non-default way). locate only searches the database, it doesn't have any extra privileges. Kris --liOOAslEiF7prFVr Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) Comment: For info see http://www.gnupg.org iD8DBQE8wz9MWry0BWjoQKURAg3EAJ9rY5SqD4J7cR8lZKtZ0n6NiGyNjACdFyAn LNZibPaHQkRBI810MWX4PDE= =s0ML -----END PGP SIGNATURE----- --liOOAslEiF7prFVr-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message