Ubuntu Touch File System

astavroulakis at os3.nl astavroulakis at os3.nl
Mon May 18 17:06:18 UTC 2015

In the home directory, there is user information such as photos, music etc
in the directories "Documents", "Downloads", "Music, "Pictures", "Videos".
However, I can't find, for example, actual SMS messages stored there, or
the phonecalls' list and other data.

Imagine that this is a forensic investigation and you want to find
possible incriminating evidence. This is the scenario I have to work with.
So far the only evidence I have managed to find is the file in which the
WiFi passwords are stored. And that is not located in the home directory.

Could you please be a bit more specific with your answer?

> All such data is stored underneath the home directory (~/phablet). Most
> of the data is stored in XDG directories, for which the environment
> variables are modified for each confined application, so that data is
> not accessible by other applications.
> On Mon, 2015-05-18 at 00:12 +0200, astavroulakis at os3.nl wrote:
>> Dear Developing Team,
>> My name is Alex Stavroulakis and I am working on an class project
>> performing forensics on the new Ubuntu Phone (BQ Aquaris E4.5). The
>> device
>> has turned out a bit problematic and due to time restraints I am
>> emailing
>> you for some assistance.
>> My task is to find where User Data is stored on the device. By that, I
>> mean Call information, SMS logs of conversation, Emails (if such are
>> stored on the device), maybe even Telegram secret chat conversations
>> etc.
>> I am mainly interested in which directories of the filesystem some of
>> this
>> information is saved and if it can be accessed in a forensically sound
>> manner.
>> I hope you can help me. Thank you in advance and I am looking forward to
>> your answer.
>> Sincerely,
>> Alex Stavroulakis

More information about the Ubuntu-devel-discuss mailing list