[Bug 936822] Re: ureadahead Caches eCryptfs Filesystem Contents

[Ubuntu Foundation's Bug Bot]

The attachment "ureadahead-other.diff" of this bug report has been
identified as being a patch.  The ubuntu-reviewers team has been
subscribed to the bug report so that they can review the patch.  In the
event that this is in fact not a patch you can resolve this situation by
removing the tag 'patch' from the bug report and editing the attachment
so that it is not flagged as a patch.  Additionally, if you are member
of the ubuntu-reviewers team please also unsubscribe the team from this
bug report.

[This is an automated message performed by a Launchpad user owned by
Brian Murray.  Please contact him regarding any issues with the action
taken in this bug report.]

** Tags added: patch

-- 
You received this bug notification because you are a member of Ubuntu
Foundations Bugs, which is subscribed to ureadahead in Ubuntu.
https://bugs.launchpad.net/bugs/936822

Title:
  ureadahead Caches eCryptfs Filesystem Contents

Status in “ureadahead” package in Ubuntu:
  New

Bug description:
  If you have autologin enabled or you're just a fast typist, ureadahead
  has the potential to cache pieces and whole filenames of files in an
  eCryptfs filesystem. This is a potential security vulnerability as it
  could theoretically provide a cryptanalyst vital pieces of plaintext
  data to break the filesystem encryption. It's a big "if" but it's
  possible.

  I have attached a patch for /etc/init/ureadahead-other.conf to prevent
  the caching of eCryptfs filesystems.

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/ureadahead/+bug/936822/+subscriptions