ecryptfs team mailing list archive

[Dustin Kirkland <dustin.kirkland@xxxxxxxxx>]

Hmm, perhaps I misunderstood your bug report...

You're concerned about the existence of the file?
-rw------- 1 norbert norbert 421581 2008-10-15 22:15 x.png.nc


When it is unmounted, what are the permissions on the ~/Private directory itself?  It should be 0500, or r-x------, which should prevent files from being written there.

:-Dustin

** Changed in: ecryptfs-utils (Ubuntu)
       Status: Invalid => Incomplete

-- 
~/Private: one file visible/readable when not mounted
https://bugs.launchpad.net/bugs/290983
You received this bug notification because you are a member of eCryptfs,
which is subscribed to ecryptfs-utils in ubuntu.

Status in “ecryptfs-utils” source package in Ubuntu: Incomplete

Bug description:
I am using the latest 8.10.
When the user with a private directory is not logged in, root can have a look in the Private directory and see exactly one file in clear:

lrwxrwxrwx 1 norbert norbert     28 2008-10-15 23:19 THIS DIRECTORY HAS BEEN UNMOUNTED TO PROTECT YOUR DATA --  Run mount.ecryptfs_private to mount again -> /sbin/mount.ecryptfs_private
-rw------- 1 norbert norbert 421581 2008-10-15 22:15 x.png.nc


Here the file x.png.nc is the one. 
This file can be extracted and viewed.

Regarding the nature of this directory, I regard this problem as security relevant.