← Back to team overview

ecryptfs team mailing list archive

Re: [Bug 277894] Re: anyone with a livecd can acces data on ubuntu -- encrypt home directories

 

hmm, thats strange. thats what happened to me. and i was even using 10.4

i put in the ubuntu live cd and when i tried to backup some files, i couldnt
unless i entered the right password and stuff, and then i only had access to
the public folder. that was my experience, i didnt read about it anywhere. i
dont even know what filevault is, but whatever it is, it sounds like
something cool that should be enabled by default, especially on laptops. i
think ubuntu should do that by default.

maybe i accidentally enabled something without realizing it. back then when
i tried it, i dont remember how familiar i was with mac.

On Tue, Nov 11, 2008 at 8:55 AM, Dustin Kirkland
<dustin.kirkland@xxxxxxxxx>wrote:

> http://docs.info.apple.com/article.html?path=Mac/10.5/en/8736.html
>
> It looks like it's an optional configuration parameter, rather than
> being done by default...
>
> :-Dustin
>
> --
> anyone with a livecd can acces data on ubuntu -- encrypt home directories
> https://bugs.launchpad.net/bugs/277894
> You received this bug notification because you are a direct subscriber
> of the bug.
>
> Status in "ecryptfs-utils" source package in Ubuntu: In Progress
>
> Bug description:
> all of my personal files i store in ubuntu can be accessed by anyone with a
> livecd without knowing my password. mac actually locks your personal data by
> default so if you put a livecd in and try to access them it will prompt you
> for the password. ubuntu does not have this. this renders all of my personal
> files insecure. this seems pretty serious to me.
>
> try using a livecd to read data from your home folder on a mac and see what
> happens. this is what should happen in ubuntu.
>
> once again, seeing as this applies to everyone on a default setup and how
> it allows anyone to see all of the files on the computer without a password,
> including extremely private and critical ones, and seeing as how you can
> eveen delete these files too, it seems pretty serious to me.
>

-- 
anyone with a livecd can acces data on ubuntu -- encrypt home directories
https://bugs.launchpad.net/bugs/277894
You received this bug notification because you are a member of eCryptfs,
which is subscribed to ecryptfs-utils in ubuntu.

Status in “ecryptfs-utils” source package in Ubuntu: In Progress

Bug description:
all of my personal files i store in ubuntu can be accessed by anyone with a livecd without knowing my password. mac actually locks your personal data by default so if you put a livecd in and try to access them it will prompt you for the password. ubuntu does not have this. this renders all of my personal files insecure. this seems pretty serious to me.

try using a livecd to read data from your home folder on a mac and see what happens. this is what should happen in ubuntu.

once again, seeing as this applies to everyone on a default setup and how it allows anyone to see all of the files on the computer without a password, including extremely private and critical ones, and seeing as how you can eveen delete these files too, it seems pretty serious to me.



Follow ups

References