Tightening security on SunOS 4.0 'fastfind'

Craig Leres leres at helios.ee.lbl.gov
Sat Jan 21 07:06:46 AEST 1989


Rene' Seindal writes:
> The following patch to find will only allow users to see the files to
> which they have search permission.  Of course the database is still there,
[...]
> ! 						if (stat(path, &statb) == 0)
> ! 							puts ( path );

Gee whiz, shouldn't you use access() instead of stat()? I mean, if you're
going to implement a suboptimal algorithm, the least you can do is code it
efficiently.

Meanwhile, some people may want to simply run updatedb as an innocuous
user:

    su guest -c /usr/lib/find/updatedb

This works pretty well for me.

		Craig



More information about the Comp.sys.sun mailing list