LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Slackware (https://www.linuxquestions.org/questions/slackware-14/)
-   -   Is slocate (secure locate) still maintained? (https://www.linuxquestions.org/questions/slackware-14/is-slocate-secure-locate-still-maintained-862485/)

qweasd 02-13-2011 06:43 PM

Is slocate (secure locate) still maintained?
 
http://slocate.trakker.ca/ seems to have been down for a few years (last backup).

Google searches for "secure locate Kevin Lindsay" and "secure locate source" do not show any signs of ongoing maintenance, but do bring up a few security advisories related, afaict, to memory corruption. If it's a Google problem, sorry in advance to the maintainer.

corp769 02-13-2011 07:10 PM

Just because there are security advisories does not mean that the slocate project is active. It just means that they were found. If you are worried about them, how about getting the source and attempt to fix it yourself? :rolleyes:

syg00 02-13-2011 07:25 PM

I think that withered a while back.
These days you should really be using mlocate - has significant performance benefits as it implement the inotify API.

Edit: - didn't notice this was the Slack forum. I wondered some time back why Pat wasn't including mlocate. It that still the case ?.

qweasd 02-14-2011 09:52 AM

13.1 has slocate 3.1 only; what about the current? mlocate does look better: offers more options, is actively maintained, is compatible with slocate and (mostly) GNU locate. On the bright side of this issue, a heap-related bug appears to have been fixed back in version 2.5 of slocate and there were no vulnerability reports since then.

guanx 02-14-2011 11:08 AM

Quote:

Originally Posted by syg00 (Post 4257389)
I think that withered a while back.
These days you should really be using mlocate - has significant performance benefits as it implement the inotify API.

Edit: - didn't notice this was the Slack forum. I wondered some time back why Pat wasn't including mlocate. It that still the case ?.

I have not been using mlocate. How does it deal with filesystems without inotify support (such as NFS v3)?

syg00 02-14-2011 12:21 PM

I imagine it implements inotify (if available) - I doubt it would require it. Been a while since I looked into it though I must admit - just been using it. I don't use NFS3 though.

qweasd 02-14-2011 03:56 PM

Quote:

Originally Posted by guanx (Post 4258007)
How does it deal with filesystems without inotify support (such as NFS v3)?

I don't believe either implementation of locate uses inotify: none of them have daemons. The index is manually rebuilt with updatedb, which runs from cron.daily in Slackware 13.1. Any filesystem can be indexed if it's mounted while updatedb is running.


All times are GMT -5. The time now is 04:44 AM.