Thanks for the report! We should definitely fix this!
But I'm having trouble reproducing it. I tried backing up and restoring,
didn't see any /tmp files. I also wasn't sure whether you mean the
encryption passphrase or the password for a network server. So I did
both. Still didn't see any /tmp files.
(This was all with 37.1-2fakesync1ubuntu0.1 on Ubuntu 18.04.)
Can you explain what the steps are for you to get to the point where we
are storing the passphrase in /tmp in plaintext? Also, is the file you
see world-readable? (Just trying to get a sense of the severity)
** Changed in: deja-dup (Ubuntu)
Importance: Undecided => Critical
** Changed in: deja-dup (Ubuntu)
Status: New => Incomplete
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1814238
Title:
deja-dup saves passphrase in /tmp
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/deja-dup/+bug/1814238/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
