Duplicity

list-current-files is done without asking passphrase: is that a bug?

Asked by dorsen

I'm using duplicity to create encrypted backups. When using list-current-files to get a listing of files in the backup, no passphrase is asked. So anyone can get the listing without the need to know the passphrase. Isn't that a bug? Or is it supposed to be that way?

Question information

Language:
English Edit question
Status:
Solved
For:
Duplicity Edit question
Assignee:
No assignee Edit question
Solved by:
edso
Solved:
Last query:
Last reply:
Revision history for this message
Best edso (ed.so) said : 		#1

On 25.03.2011 20:50, dorsen wrote:
> New question #150477 on Duplicity:
> https://answers.launchpad.net/duplicity/+question/150477
>
> I'm using duplicity to create encrypted backups. When using list-current-files to get a listing of files in the backup, no passphrase is asked. So anyone can get the listing without the need to know the passphrase. Isn't that a bug? Or is it supposed to be that way?
>

delete ~/.cache (unencrypted duplicity metadata) and try again.

ede/duply.net

Revision history for this message
dorsen (vandorsen50) said : 		#2

Thanks edso, that solved my question.

Revision history for this message
dorsen (vandorsen50) said : 		#3

For someone wanting to try it out in the future: deleting ~/.cache/duplicity/ is better. There's more in ~/.cache/ used by other programs.