Comment 2 for bug 1205690

Revision history for this message
TTL (supernova-2149) wrote :

> please explain why its a security problem?
Because a database with all the filenames is stored under /var/cache/locate/
So some stranger could guess what files you have in your encrypted /home partition, if /var is not encrypted.
I resolved this for me long ago by replacing /var/cache/locate/ by a symlink to some place inside /home where the database is stored now. But now me affects the missing indexing of encrypted drives aswell.