Thunar context menu option to move files will shred them if sent to standard Disposable #9657
Labels
affects-4.2
This issue affects Qubes OS 4.2.
C: core
needs diagnosis
Requires technical diagnosis from developer. Replace with "diagnosed" or remove if otherwise closed.
P: critical
Priority: critical. Between "major" and "blocker" in severity.
T: bug
Type: bug report. A problem or defect resulting in unintended behavior in something that exists.
ux
User experience
Qubes OS release
4.2
Brief summary
When sending files to another qube via the Thunar context menu ("Move to other qube") and selecting "Disposable VM ([...])" as the target, the new disp qube will be generated, will start, the files will be moved to it (so copied and then deleted in the origin qube) and the disp qube will immediately shut down, thus essentially deleting the files that were sent at the target location as well.
Since recovery doesn't seem too obvious, especially on SSDs with trim set to run after deletion, one could say that this actually shreds files (as opposed to the effect with "Copy to other qube", where at least only the copy will be shredded).
Steps to reproduce
Expected behavior
Either an error message or DispVM doesn't shut down (maybe launch a terminal or file browser when choosing "Move to other qube"?).
Actual behavior
While the files technically are indeed moved, the effect is actually that they're deleted, which is not what that context menu option says. As this can lead to severe data loss I'm reporting as a bug and not enhancement request.
The text was updated successfully, but these errors were encountered: