Suggestion: Leaky temp directory with encrypted home directories

[Rob King]

Hello everyone,
   Ubuntu's encrypted home directory feature is quite useful, and a good way
of increasing the security and privacy of information.

   However, the scheme is a little "leaky". Applications still use the
default system-wide temporary directory (/tmp), which is not encrypted. For
applications that store things in the temporary directory, this can cause
leaks of sensitive information outside the encrypted home directory. For
things like Deja Dup, this can cause the entire contents of the home
directory to be copied into an unencrypted area.

   I would suggest that, when a user enables the encrypted home directory
feature, the TMPDIR directory is set to a temporary directory inside that
user's home directory. This could easily be done in desktop sessions by
modifying ~/.xsessionrc. I'm not sure how easy this would be for
command-line logins.

  Thanks,
  Rob
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.ubuntu.com/archives/ubuntu-devel-discuss/attachments/20100701/23a41fb1/attachment.html>