Comment 0 for bug 259799

Revision history for this message
Mark Crutch (markc-qsiuk) wrote :

Binary package hint: nautilus

Intrepid will include support for encrypted private directories - that is, each user will have an encrypted directory that is mounted to ~/Private at login using ecryptfs.

More extensive details are here: https://wiki.ubuntu.com/EncryptedPrivateDirectory
There is an effort to write a UI for controlling the (un)mounting of ~/Private here: https://bugs.launchpad.net/ubuntu/+source/ecryptfs-utils/+bug/257901

Presently the ~/Private directory suffers from several usability issues in Nautilus:

1) The ~/Private directory appears to be like any other directory (with the normal directory icon), however because it is actually a mount point, files that are drag-dropped into it are copied rather than moved as they would be with a normal directory. This could lead to people thinking that their data have been moved to a secure directory whilst there's still an unencrypted copy sitting in the original location. Perhaps the ~/Private directory could have a special icon in Nautilus to at least make it look less like the other directories. Ideally a drag-drop to this directory would default to a move operation.

2) The ~/Private directory gets listed alongside the other mount points in the Places panel in Nautilus. This means that it also gets an "eject" icon , but clicking the eject icon results in an error (unable to unmount because it's not in fstab, and you're not root).

3) Similarly it gets an "Unmount" option in the context menu, which produces the same error.

4) If a Nautilus window is open pointing at the content of ~/Private, it is updated as soon as the directory is mounted. It does not automatically refresh when the directory is unmounted, however, which could lead to confusion as to whether or not the directory is mounted.

This bug is a request for enhancement to integrate ecryptfs mounted ~/Private directories into Nautilus in a more seamless manner. It is likely that Nautilus will need to have special-case code, either specifically for the ~/Private directory in Intrepid, or more generally for any ecryptfs mounted directories.