[jira] Updated: (IO-70) [io] Add a secureDelete method to FileUtils.java

["Henri Yandell (JIRA)" <ji...@apache.org>]

     [ http://issues.apache.org/jira/browse/IO-70?page=all ]

Henri Yandell updated IO-70:
----------------------------

    Bugzilla Id:   (was: 32144)
    Fix Version: 1.3

Consider whether FileCleaner could open up a callback for the delete and do so in 1.3, or close as a WONTFIX.

> [io] Add a secureDelete method to FileUtils.java
> ------------------------------------------------
>
>          Key: IO-70
>          URL: http://issues.apache.org/jira/browse/IO-70
>      Project: Commons IO
>         Type: Improvement

>  Environment: Operating System: other
> Platform: All
>     Reporter: Ralf Hauser
>     Priority: Minor
>      Fix For: 1.3

>
> in org.apache.commons.io.FileUtils
> Commons Fileupload uses at least the io's FileCleaner.track() method.
> Unfortunately, they just use the plain java File.delete() method and not a more
> sophisticated delete as offered in this package.
> Especially, if servers running the FileUpload are sitting in DMZs and forward
> all personal/private uploaded information in another (DB-)server behind another
> firewall, one would not want that if the DMZ machine gets hacked, all previous
> uploads that are supposedly deleted still can easily be found on the disk by a
> not even that skilled attacker.
> Therefore, it would be great to have a pgp-wipe alike secure delete method here!
> it would overwrite the file multiple times and probably, it this should be
> spawned as a separte thread since that may take longer than a state-of-the-art
> GUI would want to wait for such an action to complete.

-- 
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators:
   http://issues.apache.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see:
   http://www.atlassian.com/software/jira


---------------------------------------------------------------------
To unsubscribe, e-mail: commons-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: commons-dev-help@jakarta.apache.org