ecryptfs team mailing list archive

[DarrenShare <darren@xxxxxxxxxxxxxxxxxxxxxxx>]

*** This bug is a security vulnerability ***

Private security bug reported:

I have my full home directories encrypted for each user.

I've noticed that sometimes if I logout and then login in with another
user with sudo privileges I can still browse through my home directory,
i.e. ecryptfs hasn't dismounted my home directory.

It seems to be happening in about one third of instances and so far it's
only happened with my own account. I'm totally unable to reliably
reproduce this at the moment and can't see anything untoward in the
logs.

I could do with some tips on how to diagnose this.

Thanks.

Using Ubuntu 9.10, fully up to date. Ecryptfs-utils version 81-0ubuntu3.

** Affects: ecryptfs
     Importance: Undecided
         Status: New

** Description changed:

  I have my full home directories encrypted for each user.
  
- I've noticed that sometimes if I logout and then logi in with another
- user with sudo priveliges I can still browse through my home directory,
+ I've noticed that sometimes if I logout and then login in with another
+ user with sudo privileges I can still browse through my home directory,
  i.e. ecryptfs hasn't dismounted my home directory.
  
  It seems to be happening in about one third of instances and so far it's
  only happened with my own account. I totally unable to reliably
  reproduce this at the moment and can't see anything untoward in the
  logs.
  
  I could do with some tips on how to diagnose this.
  
  Thanks.
  
  Using Ubuntu 9.10, fully up to date. Ecryptfs-utils version 81-0ubuntu3.

** Description changed:

  I have my full home directories encrypted for each user.
  
  I've noticed that sometimes if I logout and then login in with another
  user with sudo privileges I can still browse through my home directory,
  i.e. ecryptfs hasn't dismounted my home directory.
  
  It seems to be happening in about one third of instances and so far it's
- only happened with my own account. I totally unable to reliably
+ only happened with my own account. I'm totally unable to reliably
  reproduce this at the moment and can't see anything untoward in the
  logs.
  
  I could do with some tips on how to diagnose this.
  
  Thanks.
  
  Using Ubuntu 9.10, fully up to date. Ecryptfs-utils version 81-0ubuntu3.

-- 
Encrypted home directory doesn't always dismount after logout.
https://bugs.launchpad.net/bugs/507150
You received this bug notification because you are a member of eCryptfs,
which is a direct subscriber.

Status in eCryptfs - Enterprise Cryptographic Filesystem: New

Bug description:
I have my full home directories encrypted for each user.

I've noticed that sometimes if I logout and then login in with another user with sudo privileges I can still browse through my home directory, i.e. ecryptfs hasn't dismounted my home directory.

It seems to be happening in about one third of instances and so far it's only happened with my own account. I'm totally unable to reliably reproduce this at the moment and can't see anything untoward in the logs.

I could do with some tips on how to diagnose this.

Thanks.

Using Ubuntu 9.10, fully up to date. Ecryptfs-utils version 81-0ubuntu3.