Some days ago I posted here my blog article
http://querbalken.net/workaround-truecrypt-leaking-containers-security-issue-en.html
and the goal, an open source-project to work around: https://github.com/tverrbjelke/truecrypt_wrapper<p>Installing truecrypt via dowload package just results in a leaking mess:
All your recently used containerfiles will be leaked into file ~/.local/share/recently-used.xbel<p>Started to create a practicable workaround mini open source project:
wrapper and documentation that guides through the issue.<p>My last post here got me some good replies.
Summarizing one: "truecrypt binary has no s-bit set,
so set the bookmarking-file to readonly and you be done."<p>Did that. But that won't help! (see session below)<p>Maybe I have major blind spots
(hope so, then we could close the issue and live on - so please find my mistakes).
If not, then we indeed have a leaking mess that needs workaround.<p>So please help me here:<p>Can you try below session on different platforms with different desktop environments
(truecrypt as I know links to GTK)<p>I have tried this on my up to date KUbuntu12.04LTS (with KDE) and the downloaded truecrypt-installer.
Same shit happens with different versions of truecrypt, doesn't seem to matter.
Because the open-file dialog does the leaking and that is desktop stuff.<p>Next thing I would like do is set up a clean virtual machine with e.g. opensuse (which also aims average joe).
But right now I cought a flew and should treat my fiever and recover a bit...<p>So is there something I am overlooking?<p>Please can you support me and try this on different platforms / Desktop environments?
Maybe you reply here or as issue into my github project or as comment in my blog...?
And maybe you also have some hints where to go then...<p>1) workaround, well placed to be found by soluiton seeking average joe<p>2) fix of leaking truecrypt<p>here comes the session:
Session<p>> ls -l $(which truecrypt)<p>-rwxr-xr-x 1 root root Dez 14 10:17 /usr/bin/truecrypt<p>So no S-bits, normal average-joe installtation via download from truecrypt.org<p>try as normal user<p>> cd ~/.local/share<p>> rm recently-used.xbel<p>> touch recently-used.xbel<p>> chmod a-rwx recently-used.xbel<p>> ls -l recently-used.xbel<p>---------- 1 tverrbjelke tverrbjelke 0 Dez 14 12:17 recently-used.xbel<p>> truecrypt<p>-> select file -> ok -> select -> is there somethin in recently used?<p>YES! WTF?<p>> ls -l recently-used.xbel<p>-rw------- 1 tverrbjelke tverrbjelke 733 Dez 14 12:20 recently-used.xbel<p>So try2 - chown to root:<p>> rm recently-used.xbel<p>> touch recently-used.xbel<p>> chmod a-rwx recently-used.xbel<p>> sudo chown root:root recently-used.xbel<p>> ls -l recently-used.xbel<p>---------- 1 root root 0 Dez 14 12:22 recently-used.xbel<p>> truecrypt<p>-> select file -> ok -> select -> is there somethin in recently used?<p>YES! WTF?<p>on the console I see the following message:
"(truecrypt:29437): Gtk-WARNING <i></i>: Attempting to read the recently used resources file at `/home/tverrbjelke/.local/share/recently-used.xbel', but the parser failed: Failed to open file '/home/tverrbjelke/.local/share/recently-used.xbel': No Permission."<p>> tverrbjelke@espen:~/.local/share$ ls -l recently-used.xbel<p>-rw------- 1 tverrbjelke tverrbjelke 726 Dez 14 12:29 recently-used.xbel<p>So thats the mess I ment with my blog article.
And why I wrote the workaround truecrypt_wrapper script...