workrave's idlelog is world readable

[David]

Binary package hint: workrave

Version: 1.8.3-1ubuntu1

~/.workrave/* is world readable

this folder contains idlelog..log which can be used to extract detailed information about when I am idle/not idle.

I consider this information to be private, and therefore I think ~/.workrave should be 700.

[David (djs203)]

see the attached graph for a demonstration of what data can be extracted from idelog..log

[Daniel Holbach (dholbach)]

Thanks for your bug report. Confirmed, somebody of the team should forward this bug upstream.

[Dean Sas (dsas)]

The bug has been forwarded to the upstream developers, you can track it at http://issues.workrave.org/cgi-bin/bugzilla/show_bug.cgi?id=615

[Murat Gunes (mgunes)]

Persists in 1.8.4-2ubuntu1 (Gutsy) and upstream changelog [1] doesn't mention the change.

[François Marier (fmarier)]

This bug was fixed after the 1.8.4 release. I can confirm that it is resolved in 1.8.5.

[Wouter Stomp (wouterstomp-deactivatedaccount)]

Fixed: 1.8.5-4ubuntu2 is in ubuntu now.