[Bug 936822] Re: ureadahead Caches eCryptfs Filesystem Contents
Githlar
936822 at bugs.launchpad.net
Mon Feb 20 09:06:19 UTC 2012
** Patch added: "ureadahead ecryptfs"
https://bugs.launchpad.net/bugs/936822/+attachment/2761312/+files/ureadahead-other.diff
** Visibility changed to: Public
--
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to ureadahead in Ubuntu.
https://bugs.launchpad.net/bugs/936822
Title:
ureadahead Caches eCryptfs Filesystem Contents
Status in “ureadahead” package in Ubuntu:
New
Bug description:
If you have autologin enabled or you're just a fast typist, ureadahead
has the potential to cache pieces and whole filenames of files in an
eCryptfs filesystem. This is a potential security vulnerability as it
could theoretically provide a cryptanalyst vital pieces of plaintext
data to break the filesystem encryption. It's a big "if" but it's
possible.
I have attached a patch for /etc/init/ureadahead-other.conf to prevent
the caching of eCryptfs filesystems.
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ureadahead/+bug/936822/+subscriptions
More information about the foundations-bugs
mailing list