Hmm, perhaps I misunderstood your bug report...

You're concerned about the existence of the file?
-rw------- 1 norbert norbert 421581 2008-10-15 22:15 x.png.nc


When it is unmounted, what are the permissions on the ~/Private directory 
itself?  It should be 0500, or r-x------, which should prevent files from being 
written there.

:-Dustin

** Changed in: ecryptfs-utils (Ubuntu)
       Status: Invalid => Incomplete

-- 
~/Private: one file visible/readable when not mounted
https://bugs.launchpad.net/bugs/290983
You received this bug notification because you are a member of eCryptfs,
which is subscribed to ecryptfs-utils in ubuntu.

Status in “ecryptfs-utils” source package in Ubuntu: Incomplete

Bug description:
I am using the latest 8.10.
When the user with a private directory is not logged in, root can have a look 
in the Private directory and see exactly one file in clear:

lrwxrwxrwx 1 norbert norbert     28 2008-10-15 23:19 THIS DIRECTORY HAS BEEN 
UNMOUNTED TO PROTECT YOUR DATA --  Run mount.ecryptfs_private to mount again -> 
/sbin/mount.ecryptfs_private
-rw------- 1 norbert norbert 421581 2008-10-15 22:15 x.png.nc


Here the file x.png.nc is the one. 
This file can be extracted and viewed.

Regarding the nature of this directory, I regard this problem as security 
relevant.

_______________________________________________
Mailing list: https://launchpad.net/~ecryptfs
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~ecryptfs
More help   : https://help.launchpad.net/ListHelp

Reply via email to