Public bug reported:

I was surprised to see that using /usr/bin/locate I got results from a
partition that is only readable by my user and actually is an encrypted
partition (openLuks).

I was under the impression that the updateDb application would run as
'nobody' which means it would not read my homedir if I would make it
read only for my user. Which is what I did with my homedir as well as
the /mnt/private partition. (its got a chmod 700 1000.1000)

I mention the encryption here since I consider it a security
vulnerability that a full index of an encrypted partition is stored on
an unencrypted partition.

** Affects: Ubuntu
     Importance: Undecided
         Status: Unconfirmed

** Visibility changed to: Public

-- 
locate knows about files on my encrypted partition
https://bugs.launchpad.net/bugs/113312
You received this bug notification because you are a member of Ubuntu
Bugs, which is the bug contact for Ubuntu.

-- 
ubuntu-bugs mailing list
ubuntu-bugs@lists.ubuntu.com
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to