Ubuntu
deja-dup package

  1. Bug #1814238
  2. Comment #2

Comment 2 for bug 1814238

Revision history for this message
Michael Terry (mterry) wrote :

Thanks for the report! We should definitely fix this!

But I'm having trouble reproducing it. I tried backing up and restoring, didn't see any /tmp files. I also wasn't sure whether you mean the encryption passphrase or the password for a network server. So I did both. Still didn't see any /tmp files.

(This was all with 37.1-2fakesync1ubuntu0.1 on Ubuntu 18.04.)

Can you explain what the steps are for you to get to the point where we are storing the passphrase in /tmp in plaintext? Also, is the file you see world-readable? (Just trying to get a sense of the severity)