ProcMaps.txt may contain private information such as username

[Brian Murray]

On Mon, Jul 30, 2012 at 03:25:54PM -0700, Brian Murray wrote:
> On Thu, Jul 26, 2012 at 06:39:46PM +0200, Fred . wrote:
> > https://bugs.launchpad.net/ubuntu/+source/apport/+bug/1029189
> > 
> > The ProcMaps.txt file that gets uploaded to Launchpad may contain
> > private information such as username that can be obtained from the
> > path of the home directory.
> > 
> > 7fbd44c33000-7fbd44c34000 r--s 00000000 08:01 1306557
> > /home/alice/.local/share/mime/mime.cache
> > 
> > I propose scrubbing/anonymizing the username.
> 
> As we can see in the apport source code[1], apport does try to anonymize
> information like the username in bug reports and this includes checking
> ProcMaps.txt.  It does not seem to have worked in this particular case
> and this should be reported as a bug about apport.  Please let us know
> the bug number if you open one.

Oh, I see you did open one.  I'll ensure it is in the proper state.

--
Brian Murray
Ubuntu Bug Master
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 198 bytes
Desc: Digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-bugsquad/attachments/20120730/045d0df3/attachment.pgp>