[Portland-bugs] [Bug 96730] New: RFE: insecure use of $KDE_SESSION_VERSION

bugzilla-daemon at freedesktop.org bugzilla-daemon at freedesktop.org
Wed Jun 29 16:20:58 UTC 2016


https://bugs.freedesktop.org/show_bug.cgi?id=96730

            Bug ID: 96730
           Summary: RFE: insecure use of $KDE_SESSION_VERSION
           Product: Portland
           Version: unspecified
          Hardware: Other
                OS: All
            Status: NEW
          Severity: normal
          Priority: medium
         Component: xdg-utils
          Assignee: portland-bugs at lists.freedesktop.org
          Reporter: rdieter at math.unl.edu

Seems xdg-util's use of $KDE_SESSION_VERSION is (potentially) insecure.  See
also 
https://bugs.freedesktop.org/show_bug.cgi?id=96713#c3

Could consider probing for kde/plasma similar to how gnome3 is done, via dbus,
candidates include:


plasma5:
qdbus org.kde.plasmashell /MainApplication
org.qtproject.QtQCoreApplication.applicationVersion
matches string "5.*"

plasma4:
qdbus org.kde.plasma-desktop /MainApplication
org.qtproject.Qt.QCoreApplication.applicationName
matches string "plasma-desktop"

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freedesktop.org/archives/portland-bugs/attachments/20160629/46b0cd83/attachment.html>


More information about the Portland-bugs mailing list