Linux - Software This forum is for Software issues.
Having a problem installing a new program? Want to know which application is best for the job? Post your question in this forum. |
Notices |
Welcome to LinuxQuestions.org, a friendly and active Linux Community.
You are currently viewing LQ as a guest. By joining our community you will have the ability to post topics, receive our newsletter, use the advanced search, subscribe to threads and access many other special features. Registration is quick, simple and absolutely free. Join our community today!
Note that registered members see fewer ads, and ContentLink is completely disabled once you log in.
Are you new to LinuxQuestions.org? Visit the following links:
Site Howto |
Site FAQ |
Sitemap |
Register Now
If you have any problems with the registration process or your account login, please contact us. If you need to reset your password, click here.
Having a problem logging in? Please visit this page to clear all LQ-related cookies.
Get a virtual cloud desktop with the Linux distro that you want in less than five minutes with Shells! With over 10 pre-installed distros to choose from, the worry-free installation life is here! Whether you are a digital nomad or just looking for flexibility, Shells can put your Linux machine on the device that you want to use.
Exclusive for LQ members, get up to 45% off per month. Click here for more info.
|
|
05-18-2014, 12:04 PM
|
#1
|
Senior Member
Registered: Nov 2004
Distribution: Mint, MX, antiX, SystemRescue
Posts: 2,337
|
Security of .thumbnails subdirectory?
I have a ton of files, 50,000+, in my thumbnails subdirectory ($HOME/.thumbnails). I was wondering what these are thumbnails of? I expect most of them come from the file manager (Thunar in my case), gthumb, etc.
I ask, because there are a few sensitive things I have stored as images on my computer. Things like marriage licenses, social security cards, select pages from tax returns, etc. These sensitive documents are stored encrypted (truecrypt), but I was wondering if this .thumbnail directory and its gigantic amount of contents is a possible security leak. For example, I may use truecrypt to mount an encrypted container, but then I use the file manager, gthumb, and other applications to view these things. Are all these applications creating thumbnails? Thumbnails aren't going to contain as much resolution as the original images, but in some cases they could contain enough to represent a problem, especially the "large" thumbnails.
So, how do you manage this .thumbnail stuff? Can you just delete the entire .thumbnail subdirectory if you have concerns about security? I assume it will be automatically recreated and repopulated. Thumbnails would be handy in some situations, but a potential security liability in others, if indeed they are created willy-nilly as I am assuming.
|
|
|
05-18-2014, 12:30 PM
|
#2
|
LQ Muse
Registered: Aug 2005
Location: A2 area Mi.
Posts: 17,636
|
they are just thumbnail images of images
so if you do not want anyone seeing small versions of photos or videos ........
delete them or use "shred" on them
|
|
|
05-18-2014, 04:24 PM
|
#3
|
LQ Sage
Registered: Nov 2004
Location: Saint Amant, Acadiana
Distribution: Gentoo ~amd64
Posts: 7,675
Rep:
|
I use a cronjob to remove older than three days.
|
|
|
05-18-2014, 04:44 PM
|
#4
|
Senior Member
Registered: Dec 2013
Distribution: Slackware
Posts: 1,982
|
It does pose a security risk and so I have located and turned off thumbnailing functionality of the file manager and image viewer. Technically, I wrote my own image viewer, because many write temporary files to disk even if they aren't thumbnails. However, viewnior works well and doesn't write files to disk.
|
|
|
05-20-2014, 02:16 PM
|
#5
|
Senior Member
Registered: Jun 2005
Location: England
Distribution: openSUSE, Fedora, CentOS
Posts: 1,094
Rep:
|
You could see what happens if you make ~/.thumbnails a symbolic link to /dev/null I've not tried it myself. Or you could make ~/.thumbnails a symbolic link to a directory in somewhere that gets wiped on boot. /tmp/ may mounted as tmpfs or on disk depending on your distro and if the latter, it may or may not be wiped on boot depending on your distro. If it's not wiped on boot you could make it be. /dev/shm/ is in RAM so certainly will be cleared on boot. Note that you'd have to put something in place to ensure that the target directory gets recreated after boot, you could do that in ~/.bash_profile or somewhere like that.
Note that the Thumbnail Managing Standard now conforms to XDG Base Directory Specification so on at least some current distros thumbnails are stored in ${XDG_CACHE_HOME}/thumbnails/ If $XDG_CACHE_HOME isn't set thumbnails are in ~/.cache/thumbnails/
|
|
|
All times are GMT -5. The time now is 06:12 AM.
|
LinuxQuestions.org is looking for people interested in writing
Editorials, Articles, Reviews, and more. If you'd like to contribute
content, let us know.
|
Latest Threads
LQ News
|
|