Unified autostart scripts directory

Waldo Bastian bastian at kde.org
Wed Jul 6 15:43:09 EEST 2005


On Wednesday 06 July 2005 14:16, ghee teo wrote:
> Waldo Bastian wrote:
> >On Tuesday 05 July 2005 13:40, cobaco (aka Bart Cornelis) wrote:
> >>* start/run things on other events then startup
> >>  - shutdown  (obvious extension)
> >>  - mount of media (see gnome-volume-manager)
> >
> >When I mentioned autostart at mounting of media, I was referring to the
> >execution of a [.autorun|autorun|autorun.sh] executable located on the
> > media.
> >
> >See also http://bugs.kde.org/show_bug.cgi?id=105604
> >
> >The gnome-volume-manager does of course much more than that, but I don't
> > think that's to be included in an autostart spec for now.
>
>     Do you really want to support  autorun feature? It is  such a
> security nightmare.
> Though it may seems nice, but the script could make to do anything,
> including wiping out your harddisk, install a trojan horse even before
> you realise it.
>
>    CDE on Solarirs used to support it and we had to take it out for this
> simple reason.

The user should be prompted whether to run the script/application/trojan. With 
that in place I don't see how it is different, security wise, from clicking 
on a setup.sh file. But feel free to convince me otherwise :-)

Cheers,
Waldo
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
Url : http://lists.freedesktop.org/archives/xdg/attachments/20050706/880ac15d/attachment.pgp 


More information about the xdg mailing list