[dolphin] [Bug 447214] New: When deleting a file in an encrypted vault, the file is moved to the trash folder outside the vault, becoming unencrypted

[Nikos Chantziaras]

https://bugs.kde.org/show_bug.cgi?id=447214

            Bug ID: 447214
           Summary: When deleting a file in an encrypted vault, the file
                    is moved to the trash folder outside the vault,
                    becoming unencrypted
           Product: dolphin
           Version: 21.12.0
          Platform: Gentoo Packages
                OS: Linux
            Status: REPORTED
          Severity: major
          Priority: NOR
         Component: general
          Assignee: dolphin-bugs-null at kde.org
          Reporter: realnc at gmail.com
                CC: kfm-devel at kde.org
  Target Milestone: ---

SUMMARY
***
When opening an encrypted vault in Dolphin and deleting files in it, the files
are moved outside the vault and thus are exposed unencrypted. They end up in
~/.local/share/Trash.

I believe this is a serious security issue, which is why I marked this bug with
a severity of "major."
***


STEPS TO REPRODUCE
1. Open a vault.
2. Create a new text file in the fault.
3. Select the new file in Dolphin and press the Del key on the keyboard.

OBSERVED RESULT
The file gets moved to "~/.local/share/Trash", which is unencrypted.

EXPECTED RESULT
The file should be moved to the trash folder on the root directory of the
vault.

SOFTWARE/OS VERSIONS
Operating System: Gentoo Linux 2.8
KDE Plasma Version: 5.23.4
KDE Frameworks Version: 5.89.0
Qt Version: 5.15.2
Kernel Version: 5.10.87-gentoo (64-bit)
Graphics Platform: X11

-- 
You are receiving this mail because:
You are on the CC list for the bug.