Debian bug report logs - #1255
Automatic update of the locate database includes AFS and ALEX FS!

Message received at debian-bugs:

From cus.cam.ac.uk!iwj10 Wed Aug 16 18:56:07 1995
Return-Path: <iwj10@cus.cam.ac.uk>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0siuBj-000DPkA; Wed, 16 Aug 95 18:56 PDT
Received: from bootes.cus.cam.ac.uk by pixar.com with SMTP id AA01560
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Wed, 16 Aug 1995 18:55:57 -0700
Received: by bootes.cus.cam.ac.uk 
	(Smail-3.1.29.0 #36) id m0siuBe-000BzIA; Thu, 17 Aug 95 02:56 BST
Received: by chiark
	id <m0sitpt-0002YIA@chiark.al.cl.cam.ac.uk>
	(Debian /\oo/\ Smail3.1.29.1 #29.33); Thu, 17 Aug 95 02:33 BST
Message-Id: <m0sitpt-0002YIA@chiark.al.cl.cam.ac.uk>
Date: Thu, 17 Aug 95 02:33 BST
From: Ian Jackson <iwj10@cus.cam.ac.uk>
To: Dominik Kubla <Dominik.Kubla@Uni-Mainz.DE>, debian-bugs@pixar.com
Subject: Re: Bug#1255: Automatic update of the locate database includes AFS and ALEX FS!
Precedence: air-mail

Dominik Kubla writes:
> The cron.daily scripts included in that package does not check
> wether AFS or ALEX are installed on the host. Thus the updatedb
> utility will do a truly _GLOBAL_ find to update the database.
> 
> As a fix to this add the --prunepath="/afs /alex" option by default.
> I would also like to hint that the install script should add the /home
> branch and the /var/spool/mail directory because of privacy issues.

Can you tell me what the fstype of Alex and AFS filesystems are ?
`alex' and `afs' ?

If alex filesystems are just NFS I suppose I shall have to add them to
the cron package's `checksecurity' script's exclusion list by `common
mount point'.

Perhaps we need a general list of `exclude this fstype and that
directory from any recursive searches' config file, as part of the
cron package ?

That way it will be less of a problem when we miss one out, and the
modifications to the list won't be mixed up with general changes to
the checksecurity script or the various cron.daily scripts.

Ian.

Message received at debian-bugs:

From kryten.it.com.au!andrew Wed Aug 16 07:37:26 1995
Return-Path: <andrew@kryten.it.com.au>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0sijan-0000ysC; Wed, 16 Aug 95 07:37 PDT
Received: from kryten.it.com.au by pixar.com with SMTP id AA10315
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Wed, 16 Aug 1995 07:37:02 -0700
Received: by kryten.it.com.au
	id <m0sijaY-000AdCC@kryten.it.com.au>
	(Debian /\oo/\ Smail3.1.29.1 #29.33); Wed, 16 Aug 95 22:37 WST
Message-Id: <m0sijaY-000AdCC@kryten.it.com.au>
From: andrew@kryten.it.com.au (Andrew Howell)
Subject: Re: Bug#1255: Automatic update of the locate database includes AFS and ALEX FS!
To: dominik.kubla@uni-mainz.de (Dominik Kubla), debian-bugs@pixar.com
Date: Wed, 16 Aug 1995 22:37:01 +0800 (WST)
In-Reply-To: <199508161417.QAA22970@klopfer.zdv.Uni-Mainz.DE> from "Dominik Kubla" at Aug 16, 95 04:17:57 pm
X-Mailer: ELM [version 2.4 PL24 PGP2]
Content-Type: text
Content-Length: 717       

> A sensible sysadmin will always assume that they have not ... ;-)

I tend to believe users' files are their own problem. Also some users
have public directories where they have files which they like other
people to access and I think they should be included in the database.

Andrew

-----------------------------------------------------------------------
Dehydration - 34%, Recollection of previous evening - 2%, embarrassment
factor - 91%.  Advise repair schedule:- off line for 36 hours, re-boot
startup disk, and replace head - wow, what a night!
                -- Kryten in Red Dwarf `The Last Day'

Andrew Howell				               andrew@it.com.au 
Perth, Western Australia		      howellaa@cs.curtin.edu.au 

Message received at debian-bugs:

From kryten.it.com.au!andrew Wed Aug 16 06:48:03 1995
Return-Path: <andrew@kryten.it.com.au>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0siip5-000DyjC; Wed, 16 Aug 95 06:47 PDT
Received: from kryten.it.com.au by pixar.com with SMTP id AA08677
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Wed, 16 Aug 1995 06:47:35 -0700
Received: by kryten.it.com.au
	id <m0siio2-000AdCC@kryten.it.com.au>
	(Debian /\oo/\ Smail3.1.29.1 #29.33); Wed, 16 Aug 95 21:46 WST
Message-Id: <m0siio2-000AdCC@kryten.it.com.au>
From: andrew@kryten.it.com.au (Andrew Howell)
Subject: Re: Bug#1255: Automatic update of the locate database includes AFS and ALEX FS!
To: Dominik.Kubla@Uni-Mainz.DE, debian-bugs@pixar.com
Date: Wed, 16 Aug 1995 21:46:54 +0800 (WST)
In-Reply-To: <199508161318.PAA14662@trudi.zdv.Uni-Mainz.DE> from "Dominik Kubla" at Aug 16, 95 03:18:32 pm
X-Mailer: ELM [version 2.4 PL24 PGP2]
Content-Type: text
Content-Length: 1283      

> 
> Package: findutils
> Version: 4.1-2
> 
> The cron.daily scripts included in that package does not check
> wether AFS or ALEX are installed on the host. Thus the updatedb
> utility will do a truly _GLOBAL_ find to update the database.
> 
> As a fix to this add the --prunepath="/afs /alex" option by default.
> I would also like to hint that the install script should add the /home
> branch and the /var/spool/mail directory because of privacy issues.

Seeing it's run as nobody by default I don't see how there is a
privacy issue, no one can read your mail just by knowing the filename
in /var/spool/mail unless someone has changed the permissions of
the users mail spool file. Knowing where someone's mail spool file
isn't a threat to someone's privacy imo :)

/home is also quite safe if the users have their permissions set
correctly.

Andrew

-----------------------------------------------------------------------
Dehydration - 34%, Recollection of previous evening - 2%, embarrassment
factor - 91%.  Advise repair schedule:- off line for 36 hours, re-boot
startup disk, and replace head - wow, what a night!
                -- Kryten in Red Dwarf `The Last Day'

Andrew Howell				               andrew@it.com.au 
Perth, Western Australia		      howellaa@cs.curtin.edu.au 

Message received at debian-bugs:

From Uni-Mainz.DE!Dominik.Kubla Wed Aug 16 06:18:53 1995
Return-Path: <Dominik.Kubla@Uni-Mainz.DE>
Received: from pixar.com by mongo.pixar.com with smtp
	(Smail3.1.28.1 #15) id m0siiMq-000Du2C; Wed, 16 Aug 95 06:18 PDT
Received: from trudi.zdv.Uni-Mainz.DE by pixar.com with SMTP id AA08346
  (5.67b/IDA-1.5 for debian-bugs-pipe@mongo.pixar.com); Wed, 16 Aug 1995 06:18:35 -0700
Received: from kingluey.zdv.Uni-Mainz.DE (kingluey.zdv.Uni-Mainz.DE [134.93.8.13]) by trudi.zdv.Uni-Mainz.DE (8.6.12/8.6.12) with SMTP id PAA14662 for <debian-bugs@pixar.com>; Wed, 16 Aug 1995 15:18:32 +0200
Message-Id: <199508161318.PAA14662@trudi.zdv.Uni-Mainz.DE>
Date: Wed, 16 Aug 95 15:18:32 0200
Sender: dominik.kubla@Uni-Mainz.DE
From: Dominik Kubla <Dominik.Kubla@Uni-Mainz.DE>
Organization: Johannes Gutenberg Universitdt, Mainz
X-Mailer: Mozilla 1.1N (X11; I; AIX 2)
Mime-Version: 1.0
To: debian-bugs@pixar.com
Subject: Automatic update of the locate database includes AFS and ALEX FS!
X-Url: ftp://ftp.uni-mainz.de/pub/Linux/arch/i386/distrib/debian/debian-bugs/html/Reporting.html
Content-Transfer-Encoding: 7bit
Content-Type: text/plain; charset=us-ascii

Package: findutils
Version: 4.1-2

The cron.daily scripts included in that package does not check
wether AFS or ALEX are installed on the host. Thus the updatedb
utility will do a truly _GLOBAL_ find to update the database.

As a fix to this add the --prunepath="/afs /alex" option by default.
I would also like to hint that the install script should add the /home
branch and the /var/spool/mail directory because of privacy issues.

I am using 0.93R5 together with AFS3.3, NIS/AMD and Monsanto NQS.
The look-and-feel is identical with all our Unix systems using X11R6 and
OSF Motif 1.x

Cheers,
  Dominik
-- 
eMail: Dominik.Kubla@Uni-Mainz.DE
sMail: Dominik Kubla, Lannerstrasse 53, D-55270 Ober-Olm, European Union
PGP key: http://www.uni-mainz.de/~kubla/pgp.asc
WLAF W3-site: http://www.uni-mainz.de/~kubla/WLAF/Welcome.html