*** This bug is a security vulnerability ***
Public security bug reported:
Binary package hint: ecryptfs-utils
Hello,
I am having a problem with my Private folder setup using ecrypts.
I don't like the automounting behaviour of ecrypts. I prefer to manually
mount it when I need it.
To do so, I have renamed this file:
~/.ecryptfs/auto-mount
to
~/.ecryptfs/NO_auto-mount
After doing this, if I'm in a virtual terminal (eg, CTRL-ALT 1) and log
in, when I log out by typing exit, it starts another bash which will
then logs out when I type exit the second time. When I rename the file
back to the original name (auto-mount), then I only have to type exit to
logout once. If I move the file out of the dir entirely, I still have to
exit by type exit followed by typing exit in the new bash (well, now
that I think about it, I haven't "proven" it is the same bash by looking
up the PID).
This behaviour occurs EVERY time and thus is very reproducible.
It does NOT matter whether Private is actually mounted as decrypted or
not.
Also, it does NOT behave this way in xterm nor gnome-terminal window
consoles.
I would love a fix for this is it is annoying to have to exit twice
unless I want my ecrypt available to any root-privileged user to see
that happens to be logged on and wants to go snooping on my /home dir.
It is for this reason I mark it as a security vulnerability. I realize
that having it automounted is the default (which I personally feel is a
security vulnerability in the first place but I understand the reasoning
in trying to make it easier for the masses - but hence raises the
question why an easy way to prevent automounting of ecryptfs in the
first place is not "built-in")
With thanks,
Narnie
** Affects: ecryptfs-utils (Ubuntu)
Importance: Undecided
Status: New
** Tags: ecryptfs exit log logout out terminal twice virtual
** Tags added: terminal virtual
** Visibility changed to: Public
--
Have to log out of a virtual terminal twice if Private not set to automount
https://bugs.launchpad.net/bugs/526868
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
--
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
