https://bugs.kde.org/show_bug.cgi?id=501030
Bug ID: 501030
Summary: KDE Plasma Build-in Clipboard manager saves clipboard
history to Disk
Classification: Plasma
Product: plasmashell
Version: 6.3.2
Platform: Other
OS: Linux
Status: REPORTED
Severity: critical
Priority: NOR
Component: Activities in general
Assignee: plasma-b...@kde.org
Reporter: gooda...@starmail.net
CC: ivan.cu...@kde.org
Target Milestone: 1.0
SUMMARY
KDE Plasma Build-in Clipboard manager saves text clipboard history to storage
drive, and even hardened settings do not disable this behavior.
Works under X11 and Wayland.
STEPS TO REPRODUCE
1. Copy something to clipboard
2. Check System Tray to show up Clipboard icon
3. Click upon it and choose Settings pictogram
4. In General Configuration harden all settings alike:
4.1. Uncheck "Clipboard History"
4.2. Uncheck "Selection and Clipboard"
4.3. If possible, "Text selection" set to "Only when explicitly copied"
4.4. "Non-text selection" to "Never save in history"
5. Copy any text you want to
6. Go to ~/.local/share/klipper/data/
7. Choose most fresh folder, and click upon files until you'll find text you
did copied earlier.
OBSERVED RESULT
KDE Plasma built-in Clipboard gives access to all programs in userspace with
user priviledge unrestricted access to TEXT CLIPBOARD DATA. Which is sensitive
if you don't use Password managers, because it does not spreads on password
managers like KeePass.
EXPECTED RESULT
At least text clipboard must sit in RAM, not on storage drive.
SOFTWARE/OS VERSIONS
Operating System: EndeavourOS
KDE Plasma Version: 6.3.2
KDE Frameworks Version: 6.11.0
Qt Version: 6.8.2
Kernel Version: 6.13.5-arch1-1 (64-bit)
Graphics Platform: X11
ADDITIONAL INFORMATION
Vanilla KDE Plasma, vanilla EndeavourOS, default settings.
--
You are receiving this mail because:
You are watching all bug changes.
