[tightsocks]

Just started fiddling around with TrueCrypt and noticed that when we mount a container file that a copy of it seems to be created at /private/tmp.

Is it really creating a copy or is it some kind of alias or symbolic link. Seems like it is a full copy of the container file...

Why would it do this, isn't it kind of a security leak?

I would have posted this at the TrueCrypt.org forum but it's registration requirements are so strict that it won't accept my email.

[davidbk1]

That's your temporary folder where applications can put things they only need for a short while. I don't use TrueCrypt so I can't tell you more about the file, but you could look into it with the ls command. It can tell you whether or not a file is a symlink. You can also see the number of links to find out if it's just a hardlink to a file that also exists elsewhere.