Hello everyone, Ubuntu's encrypted home directory feature is quite useful, and a good way of increasing the security and privacy of information.
However, the scheme is a little "leaky". Applications still use the default system-wide temporary directory (/tmp), which is not encrypted. For applications that store things in the temporary directory, this can cause leaks of sensitive information outside the encrypted home directory. For things like Deja Dup, this can cause the entire contents of the home directory to be copied into an unencrypted area. I would suggest that, when a user enables the encrypted home directory feature, the TMPDIR directory is set to a temporary directory inside that user's home directory. This could easily be done in desktop sessions by modifying ~/.xsessionrc. I'm not sure how easy this would be for command-line logins. Thanks, Rob
-- Ubuntu-devel-discuss mailing list Ubuntu-devel-discuss@lists.ubuntu.com Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss
