gajim 0.8.2 creates a conversation log file even when configured not to. Reproducible: Always Steps to Reproduce: 1.When configuring account, uncheck "Save conversation logs for all contacts" under the General tab. Once connected, add a contact, right click it and go to Information. Uncheck "Log History" 2.Transmit or recieve some text. 3.Log file is created in ~/.gajim/logs/ Actual Results: A log file is created on the hard disk. It creates a file with the same name as the name of the contact in the ~/.gajim/logs/ directory. Expected Results: Log file should not have been created or written to. I found it impossible to disable logging of conversation to hard disk with this program.
Well, i can see the problem of possible information disclosure, though i don't think this is enough to qualify as security bug, so i'll reassign to net-im, feel free to change it back to security again if i'm wrong ;)
try 0.10