ecryptfs team mailing list archive

Thread
Date

[Bug 290983] Re: mount.ecryptfs_private: one file always visible/readable

To: ecryptfs@xxxxxxxxxxxxxxxxxxx
From: Brian Murray <brian@xxxxxxxxxx>
Date: Thu, 30 Oct 2008 17:18:17 -0000
Reply-to: Bug 290983 <290983@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: ecryptfs-utils (Ubuntu)
Sourcepackagename: None => ecryptfs-utils

-- 
 mount.ecryptfs_private: one file always visible/readable
https://bugs.launchpad.net/bugs/290983
You received this bug notification because you are a member of eCryptfs,
which is subscribed to ecryptfs-utils in ubuntu.

Status in “ecryptfs-utils” source package in Ubuntu: New

Bug description:
I am using the latest 8.10.
When the user with a private directory is not logged in, root can have a look in the Private directory and see exactly one file in clear:

lrwxrwxrwx 1 norbert norbert     28 2008-10-15 23:19 THIS DIRECTORY HAS BEEN UNMOUNTED TO PROTECT YOUR DATA --  Run mount.ecryptfs_private to mount again -> /sbin/mount.ecryptfs_private
-rw------- 1 norbert norbert 421581 2008-10-15 22:15 x.png.nc


Here the file x.png.nc is the one. 
This file can be extracted and viewed.

Regarding the nature of this directory, I regard this problem as security relevant.