/etc/cron.daily/locate script runs as wrong user

[Shedros]

The /etc/cron.daily/locate script runs as wrong user. In the package the line says LOCALUSER="nobody" but it should be LOCALUSER="root" because if the "updatedb" script runs as nobody a lot of files can't be indexed because nobody hasn't the right to view all system files.

The information I should provide regarind the guidelines

# lsb_release -rd
Description: Ubuntu 16.04.2 LTS
Release: 16.04

# apt-cache policy locate
locate:
  Installed: 4.6.0+git+20160126-2
  Candidate: 4.6.0+git+20160126-2
  Version table:
 *** 4.6.0+git+20160126-2 500
        500 http://mirror.hetzner.de/ubuntu/packages xenial/universe amd64 Packages
        500 http://de.archive.ubuntu.com/ubuntu xenial/universe amd64 Packages
        100 /var/lib/dpkg/status

[Andreas Metzler (k-launchpad-downhill-at-eu-org)]

> "updatedb" script runs as nobody a lot of files can't be indexed because nobody hasn't the right
> to view all system files.

And that is a good thing. The locate-database is public. It must not contain data that is not public, i.e. contents of directories that cannot be listed by non-privileged users.