ecryptfs team mailing list archive

Thread
Date

[Bug 290983] [NEW] mount.ecryptfs_private: one file always visible/readable

To: ecryptfs@xxxxxxxxxxxxxxxxxxx
From: Launchpad Bug Tracker <290983@xxxxxxxxxxxxxxxxxx>
Date: Thu, 30 Oct 2008 17:18:19 -0000
Reply-to: Bug 290983 <290983@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

You have been subscribed to a public bug:

I am using the latest 8.10.
When the user with a private directory is not logged in, root can have a look in the Private directory and see exactly one file in clear:

lrwxrwxrwx 1 norbert norbert     28 2008-10-15 23:19 THIS DIRECTORY HAS BEEN UNMOUNTED TO PROTECT YOUR DATA --  Run mount.ecryptfs_private to mount again -> /sbin/mount.ecryptfs_private
-rw------- 1 norbert norbert 421581 2008-10-15 22:15 x.png.nc


Here the file x.png.nc is the one. 
This file can be extracted and viewed.

Regarding the nature of this directory, I regard this problem as
security relevant.

** Affects: ecryptfs-utils (Ubuntu)
     Importance: Undecided
         Status: New

-- 
 mount.ecryptfs_private: one file always visible/readable
https://bugs.launchpad.net/bugs/290983
You received this bug notification because you are a member of eCryptfs, which is subscribed to ecryptfs-utils in ubuntu.