Unified autostart scripts directory

[ghee teo]

Waldo Bastian wrote:

>On Wednesday 06 July 2005 14:16, ghee teo wrote:
>  
>
>>Waldo Bastian wrote:
>>    
>>
>>>On Tuesday 05 July 2005 13:40, cobaco (aka Bart Cornelis) wrote:
>>>      
>>>
>>>>* start/run things on other events then startup
>>>> - shutdown  (obvious extension)
>>>> - mount of media (see gnome-volume-manager)
>>>>        
>>>>
>>>When I mentioned autostart at mounting of media, I was referring to the
>>>execution of a [.autorun|autorun|autorun.sh] executable located on the
>>>media.
>>>
>>>See also http://bugs.kde.org/show_bug.cgi?id=105604
>>>
>>>The gnome-volume-manager does of course much more than that, but I don't
>>>think that's to be included in an autostart spec for now.
>>>      
>>>
>>    Do you really want to support  autorun feature? It is  such a
>>security nightmare.
>>Though it may seems nice, but the script could make to do anything,
>>including wiping out your harddisk, install a trojan horse even before
>>you realise it.
>>
>>   CDE on Solarirs used to support it and we had to take it out for this
>>simple reason.
>>    
>>
>
>The user should be prompted whether to run the script/application/trojan. With 
>that in place I don't see how it is different, security wise, from clicking 
>on a setup.sh file. But feel free to convince me otherwise :-)
>  
>

   Hmm, I missed the bit about the prompt, the bit on CDE was removed 
because it didn't prompt the user. :) Okay.

-Ghee

>Cheers,
>Waldo
>  
>
>------------------------------------------------------------------------
>
>_______________________________________________
>xdg mailing list
>xdg at lists.freedesktop.org
>http://lists.freedesktop.org/mailman/listinfo/xdg
>  
>