GNOME Bugzilla – Bug 642739
Translog files being created in Gnucash program installation directory
Last modified: 2018-06-29 22:53:48 UTC
Version 2.4.0, Win32, Sqlite data file. Translog files are being created in the program intallation directory, C:\Program Files\gnucash\bin. For example 'translog.20110218211031.log' This would appear to be a security risk as this is not a user data directory so seems to be a major bug. I'm not sure why these files are being created in the first place, but that's besides the point. On a multi-user computer anyone with access to the c:\program files directory can access this data.
Thanks for the bug report. This particular bug has already been reported into our bug tracking system, but please feel free to report any further bugs you find. *** This bug has been marked as a duplicate of bug 503722 ***
I have seen bug 503722 and believe this to be a very different issue. Bug 503722 concerns whether folders such as .gnucash, .gconf, .gnome2 etc. go in the user's home directory, or in the Appdata folder of that user's home directory. What I am reporting concerns Translog files created using Sqlite with Windows, and that they are going into the Gnucash *program installation directory* i.e. NOT a user directory at all but a system one. On my XP system the user home directory is C:\Documents and Settings\username\ Folders such as .gnucash, .gconf etc. are there. Adding the line: HOME={APPDATA}/GnuCash to tne 'environment' file as described in bug 503722 causes those to then get put in C:\Documents and Settings\username\Appdata\ The Translog files are being created in C:\Program Files\gnucash\bin I have set this to unresolved again. Pleas advise if I should continue to comment on this in bug 503722, but given it's a different issue I feel that would be confusing.
You are correct that these are different bugs. Please keep your comments regarding the translog on this bug. Thank you.
Changed version to 2.4.3 as this is still happening. For any multi-user system or business this represents a security risk.
Thanks for the heads up. I lost track of this bug because I thought another developer was working on it. I have committed a fix in r20400. For file based books, the logs are stored next to the file. This was the case already for xml based files, I have now added that for sqlite based files as well. For mysql or postgresql based books, the logs will be stored in <path-to-.gnucash-dir>/translog.
*** Bug 638416 has been marked as a duplicate of this bug. ***
Reassign version to 2.4.x so that individual 2.4 versions can be retired.
GnuCash bug tracking has moved to a new Bugzilla host. This bug has been copied to https://bugs.gnucash.org/show_bug.cgi?id=642739. Please update any external references or bookmarks.