[Bug 1681103] Re: /etc/cron.daily/locate script runs as wrong user

[Andreas Metzler]

> "updatedb" script runs as nobody a lot of files can't be indexed because nobody hasn't the right
> to view all system files.

And that is a good thing. The locate-database is public. It must not
contain data that is not public, i.e. contents of directories that
cannot be listed by non-privileged users.

** Changed in: findutils (Ubuntu)
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to findutils in Ubuntu.
https://bugs.launchpad.net/bugs/1681103

Title:
  /etc/cron.daily/locate script runs as wrong user

Status in findutils package in Ubuntu:
  Invalid

Bug description:
  The /etc/cron.daily/locate script runs as wrong user. In the package
  the line says LOCALUSER="nobody" but it should be LOCALUSER="root"
  because if the "updatedb" script runs as nobody a lot of files can't
  be indexed because nobody hasn't the right to view all system files.

  
  The information I should provide regarind the guidelines

  # lsb_release -rd
  Description:    Ubuntu 16.04.2 LTS
  Release:        16.04

  # apt-cache policy locate
  locate:
    Installed: 4.6.0+git+20160126-2
    Candidate: 4.6.0+git+20160126-2
    Version table:
   *** 4.6.0+git+20160126-2 500
          500 http://mirror.hetzner.de/ubuntu/packages xenial/universe amd64 Packages
          500 http://de.archive.ubuntu.com/ubuntu xenial/universe amd64 Packages
          100 /var/lib/dpkg/status

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/findutils/+bug/1681103/+subscriptions