Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 181826 - sys-apps/slocate-2.7-r8 ignores PRUNEPATHS in /etc/updatedb.conf
Summary: sys-apps/slocate-2.7-r8 ignores PRUNEPATHS in /etc/updatedb.conf
Status: RESOLVED NEEDINFO
Alias: None
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Gentoo Security
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2007-06-12 20:58 UTC by Joël
Modified: 2007-10-05 16:22 UTC (History)
3 users (show)

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Joël 2007-06-12 20:58:12 UTC
Most users who use an encrypted /home mount, will want to include /home in PRUNEPATHS. Trouble is, this is **NOT** secure, and brings a false sense of security because slocate < 3.0 will ignore that setting, and will index /home directories anyway !!

The new slocate-3.1 will honor PRUNEPATHS properly.

May I recommend marking slocate-3.1 stable, or at worst, putting a BIG warning in /etc/updatedb.conf ?

Many thanks
Comment 1 Sune Kloppenborg Jeppesen (RETIRED) gentoo-dev 2007-06-13 19:14:02 UTC
Thx Joël for the notification. 

I see it fixed in v3.0 beta r3 but I'm not sure wether it affects 2.7?

base-system please advise.
Comment 2 Joël 2007-06-13 19:34:39 UTC
You're welcome.

Yes, as stated in the bug summary (I forgot to copy it in the description): it *does* affect 2.7-r8.
Comment 3 SpanKY gentoo-dev 2007-06-13 22:50:14 UTC
having a file listing of an encrypted partition is hardly something to worry over, but i guess some people wear bigger tin foil hats than i

why exactly do you think PRUNEPATHS does not work in 2.7 ?  the ChangeLog says PRUNEFS was being ignored in the early 3.0 versions, it doesnt say anything about PRUNEPATHS or PRUNEFS with the 2.7 versions
Comment 4 Assaf Berg 2007-09-29 18:00:31 UTC
The PRUNEPATHS variable is being ignored by slocate-2.7-r8 on my machine as well (it's pretty easy to check...).
I've remerged and rerun updatedb to make sure.
Comment 5 Róbert Čerňanský 2007-10-05 16:22:06 UTC
Same here with slocate-2.7-r8. Re-emerging slocate or removing  /var/lib/slocate/slocate.db did not help.


$ cat /etc/updatedb.conf
# /etc/updatedb.conf: config file for slocate
# $Id: updatedb.conf,v 1.23 2007/08/08 16:22:32 lu_zero Exp $

# This file sets variables that are used by updatedb.
# For more info, see the updatedb(1) manpage.

# Filesystems that are pruned from updatedb database
PRUNEFS="afs auto autofs cifs devfs devpts eventpollfs futexfs gfs hugetlbfs iso9660 mqueue ncpfs nfs NFS nfs4 nfsd nnpfs pipefs proc ramfs rpc_pipefs selinuxfs sfs shfs smbfs sockfs spufs subfs supermount sysfs tmpfs udf usbfs vperfctrfs"

# Paths which are pruned from updatedb database
# by HS
#PRUNEPATHS="/tmp /var/tmp /root/.ccache"
PRUNEPATHS="/tmp /var/tmp /root/.ccache /usr/portage"



$ cat /etc/cron.daily/slocate 
#! /bin/sh

if [ -x /usr/bin/updatedb ]
then
	if [ -f /etc/updatedb.conf ]
	then
		nice /usr/bin/updatedb
	else
		nice /usr/bin/updatedb -f proc
	fi
fi



$ emerge --info
Portage 2.1.3.9 (default-linux/amd64/2007.0/desktop, gcc-4.1.2, glibc-2.5-r4, 2.6.21-gentoo-r4 x86_64)
=================================================================
System uname: 2.6.21-gentoo-r4 x86_64 AMD Athlon(tm) 64 Processor 3200+
Timestamp of tree: Sat, 29 Sep 2007 18:30:09 +0000
app-shells/bash:     3.2_p17
dev-java/java-config: 1.3.7, 2.0.33-r1
dev-lang/python:     2.4.4-r4
dev-python/pycrypto: 2.0.1-r6
sys-apps/baselayout: 1.12.9-r2
sys-apps/sandbox:    1.2.17
sys-devel/autoconf:  2.13, 2.61
sys-devel/automake:  1.4_p6, 1.5, 1.6.3, 1.7.9-r1, 1.8.5-r3, 1.9.6-r2, 1.10
sys-devel/binutils:  2.17
sys-devel/gcc-config: 1.3.16
sys-devel/libtool:   1.5.23b
virtual/os-headers:  2.6.21
ACCEPT_KEYWORDS="amd64"
CBUILD="x86_64-pc-linux-gnu"
CFLAGS="-O2 -march=athlon64 -fomit-frame-pointer -fweb -pipe"
CHOST="x86_64-pc-linux-gnu"
CONFIG_PROTECT="/etc /usr/kde/3.5/env /usr/kde/3.5/share/config /usr/kde/3.5/shutdown /usr/share/X11/xkb /usr/share/config"
CONFIG_PROTECT_MASK="/etc/env.d /etc/env.d/java/ /etc/gconf /etc/revdep-rebuild /etc/splash /etc/terminfo"
CXXFLAGS="-O2 -march=athlon64 -fomit-frame-pointer -fweb -pipe"
DISTDIR="/usr/portage/distfiles"
FEATURES="distlocks metadata-transfer sandbox sfperms strict unmerge-orphans userfetch"
GENTOO_MIRRORS="http://ftp.belnet.be/mirror/rsync.gentoo.org/gentoo http://distfiles.gentoo.org http://www.ibiblio.org/pub/Linux/distributions/gentoo"
LINGUAS="en sk cs ru"
MAKEOPTS="-j2"
PKGDIR="/usr/portage/packages"
PORTAGE_RSYNC_OPTS="--recursive --links --safe-links --perms --times --compress --force --whole-file --delete --delete-after --stats --timeout=180 --exclude=/distfiles --exclude=/local --exclude=/packages --filter=H_**/files/digest-*"
PORTAGE_TMPDIR="/var/tmp"
PORTDIR="/usr/portage"
PORTDIR_OVERLAY="/usr/portage/local/layman/emacs /usr/portage/local/layman/sunrise /usr/portage/local/layman/berkano /opt/reserve/install/portage/hs /opt/reserve/install/portage/xmms-overlay"
SYNC="rsync://rsync.gentoo.org/gentoo-portage"
USE="3dnow 3dnowex 3dnowext 7zip X Xaw3d a52 aac aalib acl acpi adplug aim alsa amd64 amrnb amrwb bash-completion bdf berkdb bitmap-fonts blender-game bluetooth bzip2 bzlib cairo caps cddb cdparanoia cdr cli cracklib crypt css cups dbus dga divx dri dts dv dvd dvdnav dvdr dvdread editor edl emacs emboss enblend encode ethereal evo exif expat fbcon ffmpeg firefox flac flash font-server foomaticdb fortran ftp gdbm gif gimp gimpprint glade gmedia gnutella gphoto2 gpm gs gtk gtkhtml guile hal hdri iconv icq imagemagick imap imlib ipv6 isdnlog jabber jack jbig jpeg jpeg2k kerberos ladcca lcms ldap leim libcaca lirc live lm_sensors mad maildir matroska memlimit midi mikmod mime mmx mmxext mng modplug mono motif mozsvg mp2 mp3 mpeg mplayer msn mudflap mule musepack musicbrainz ncurses network new-login nls nocd nowin nptl nptlonly nsplugin nvidia ofx ogg openal openexr opengl openmp oscar oss pam pcre pda pdf perl png pnp portaudio ppds pppd python qt3 qt3support qt4 quicktime rar readline realmedia recode reflection restrict-javascript roe rtc samba sasl sdl server session sid sift snmp sockets sox speex spell spl srt sse sse2 ssl subtitles svg tabs tcl tcltk tcpd teamarena themes theora threads tiff tk truetype truetype-fonts tta type1-fonts udev unicode usb userlocales vcd vorbis wavpack wma wmf wmp wxgtk1 wxwindows x264 xface xml xorg xosd xpm xscreensaver xv xvid xvmc yahoo zlib" ALSA_CARDS="ali5451 als4000 atiixp atiixp-modem bt87x ca0106 cmipci emu10k1x ens1370 ens1371 es1938 es1968 fm801 hda-intel intel8x0 intel8x0m maestro3 trident usb-audio via82xx via82xx-modem ymfpci" ALSA_PCM_PLUGINS="adpcm alaw asym copy dmix dshare dsnoop empty extplug file hooks iec958 ioplug ladspa lfloat linear meter mulaw multi null plug rate route share shm softvol" ELIBC="glibc" INPUT_DEVICES="keyboard mouse evdev" KERNEL="linux" LCD_DEVICES="bayrad cfontz cfontz633 glk hd44780 lb216 lcdm001 mtxorb ncurses text" LINGUAS="en sk cs ru" LIRC_DEVICES="serial" USERLAND="GNU" VIDEO_CARDS="nvidia nv fbdev vesa"
Unset:  CTARGET, EMERGE_DEFAULT_OPTS, INSTALL_MASK, LANG, LC_ALL, LDFLAGS, PORTAGE_COMPRESS, PORTAGE_COMPRESS_FLAGS, PORTAGE_RSYNC_EXTRA_OPTS