https://bugs.kde.org/show_bug.cgi?id=386104
Bug ID: 386104
Summary: [Security] Integrate trash in the vault concept
Product: Plasma Vault
Version: unspecified
Platform: Other
OS: Linux
Status: UNCONFIRMED
Severity: grave
Priority: NOR
Component: general
Assignee: ivan.cu...@kde.org
Reporter: cryptod...@libertymail.net
Target Milestone: ---
Should a user want to delete a file that is in his vault, she can use Dolphin
or similar to move it to the kde-trash system.
This raises a security concern as this action copies the encrypted file to the
trash directory which is unencrypted.
As such a user can compromise their security without realizing and closing the
vault will not affect the deleted file.
I suggest integrating with the KDE trash system and creating a trash directory
in the (mounted) vault and making sure that a move-to-trash action will move
the file only inside the vault. Never outside of it.
--
You are receiving this mail because:
You are watching all bug changes.
