+x bit (Was: RFC: Autostart spec, first draft)

Hongli Lai h.lai at chello.nl
Thu Jul 7 15:28:13 EEST 2005


Waldo Bastian wrote:
> They will need to understand the notion of "executable", no? How else would a 
> user be able to start an application from the media without auto-start?

This is how:
[hongli at izumi hongli]$ cp /bin/echo trojan
[hongli at izumi hongli]$ chmod -x trojan
[hongli at izumi hongli]$ ./trojan
bash: ./trojan: Permission denied
[hongli at izumi hongli]$ /lib/ld-linux.so.2 ./trojan pwned
pwned

As you can see, the executable bit doesn't prevent trojans from being 
executed.



More information about the xdg mailing list