Mailing-List: contact commons-dev-help@jakarta.apache.org; run by ezmlm
Precedence: bulk
Reply-To: "Jakarta Commons Developers List" <commons-dev@jakarta.apache.org>
Message-ID: <24533370.1153348160902.JavaMail.jira@brutus>
Date: Wed, 19 Jul 2006 15:29:20 -0700 (PDT)
From: "Stephen Colebourne (JIRA)" <jira@apache.org>
To: commons-dev@jakarta.apache.org
Subject: [jira] Updated: (IO-70) [io] Add a secureDelete method to
 FileUtils.java
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit

     [ http://issues.apache.org/jira/browse/IO-70?page=all ]

Stephen Colebourne updated IO-70:
---------------------------------

    Component/s: Utilities

> [io] Add a secureDelete method to FileUtils.java
> ------------------------------------------------
>
>                 Key: IO-70
>                 URL: http://issues.apache.org/jira/browse/IO-70
>             Project: Commons IO
>          Issue Type: Improvement
>          Components: Utilities
>         Environment: Operating System: other
> Platform: All
>            Reporter: Ralf Hauser
>            Priority: Minor
>             Fix For: 1.3
>
>
> in org.apache.commons.io.FileUtils
> Commons Fileupload uses at least the io's FileCleaner.track() method.
> Unfortunately, they just use the plain java File.delete() method and not a more
> sophisticated delete as offered in this package.
> Especially, if servers running the FileUpload are sitting in DMZs and forward
> all personal/private uploaded information in another (DB-)server behind another
> firewall, one would not want that if the DMZ machine gets hacked, all previous
> uploads that are supposedly deleted still can easily be found on the disk by a
> not even that skilled attacker.
> Therefore, it would be great to have a pgp-wipe alike secure delete method here!
> it would overwrite the file multiple times and probably, it this should be
> spawned as a separte thread since that may take longer than a state-of-the-art
> GUI would want to wait for such an action to complete.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

---------------------------------------------------------------------
To unsubscribe, e-mail: commons-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-dev-help@jakarta.apache.org