Ubuntu
file-roller package

encryption password shown in the clear in task list

Bug #880473 reported by Rolf Leggewie on 2011-10-23

264

This bug affects 2 people

Affects		Status	Importance	Assigned to	Milestone
	file-roller (Ubuntu)	Confirmed	Low	Unassigned

Bug Description

7z in lucid shows the encryption password in the clear in the task list (-p option). Verified for encrypting and decrypting.

Revision history for this message

Rolf Leggewie (r0lf) wrote on 2011-10-23:

test file to demostrate the issue Edit (214 bytes, application/x-7z-compressed)

extract the attached file and watch the task list. Password is test which will be visible to anyone logged in to the system.

visibility:

private → public

Revision history for this message

Marc Deslauriers (mdeslaur) wrote on 2011-11-06:

This is actually an issue with how file-roller calls external applications.

affects:	p7zip (Ubuntu) → file-roller (Ubuntu)
Changed in file-roller (Ubuntu):
status:	New → Confirmed
importance:	Undecided → Low

Revision history for this message

Marc Deslauriers (mdeslaur) wrote on 2011-11-06:

Original reporter apparently wasn't using file-roller. Changed back to p7zip.

Please add detailed steps on how to reproduce this issue.

affects:

file-roller (Ubuntu) → p7zip (Ubuntu)

Revision history for this message

Rolf Leggewie (r0lf) wrote on 2011-11-06:

I was using nautilus which apparently uses file-roller internally. Marc was also kind enough to educate me that specifying the password on the cli will always make it show up in the task list and is not a valid test case. Changing back to file-roller package.

affects:

p7zip (Ubuntu) → file-roller (Ubuntu)