OK I did that and the result was the above output. And then still in same truecrypt session I saw my recently used file - while the bookmarking file still was

OK I did that and the result was the above output. And then still in same truecrypt session I saw my recently used file - while the bookmarking file still was empty. So closing truecrypt reopening the recently used files list was empty. So that seems to work. thx Question for me is, how the hell can a normal process trigger root-owned read only filed to becom overwritten and chowned to normal user? What is GTK magic doing there?? I dont understand the above session! maybe someone can explai that to me?