ecryptfs team mailing list archive

["Guilherme Gondim \(semente\)" <semente@xxxxxxxxxxxx>]

*** This bug is a security vulnerability ***

Private security bug reported:

I could do that adding a SSH key to the user's authorized_keys file and
login with that key. I am surprise about I could decrypt the user's home
directory!

Doesn't  eCryptfs prevent the root user to mount a user's home
directory?

Thanks!

** Affects: ecryptfs
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of eCryptfs,
which is a direct subscriber.
https://bugs.launchpad.net/bugs/696276

Title:
  root user can mount a user encrypted directory

Status in eCryptfs - Enterprise Cryptographic Filesystem:
  New

Bug description:
  I could do that adding a SSH key to the user's authorized_keys file and login with that key. I am surprise about I could decrypt the user's home directory!

Doesn't  eCryptfs prevent the root user to mount a user's home directory?

Thanks!