Hi Mackenzie, Luis,

Thanks very much for the bug report, analysis, and patch.

The encrypted home directory mount point is set to 500 to keep you from
inadvertently writing unencrypted files into the mount.  Should your
encrypted home (or private) become unmounted for whatever reason, and
some random application writes some data into your unencrypted
mountpoint, it would be written to disk in plain text, and you probably
wouldn't be able to find that file next time you log and your encrypted
directory is mounted properly.

I need to look a little deeper, but I think this is a problem in the
net-installer code.

Other installations perform the encrypted mount *before* such
configuration files are written into the home directory (such as
/etc/skel/*).  Thus, these files get written to the disk encrypted.

I'm going to CC Colin Watson on this bug, as he can probably point us to
the correct code.

:-Dustin

-- 
netboot newuser and ecryptfs fails to login
https://bugs.launchpad.net/bugs/317895
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to