Security issue with .desktop files revisited

Benedikt Meurer benny at
Tue Apr 11 20:16:51 EEST 2006

Sam Morris wrote:
>>> A viable strategy would be to start creating .desktop files with +x set
>>> and a #!/usr/bin/xdg-open line now and then to wait a while before
>>> environments actually start requiring it.
>> Please do not encourage people to hardcode /usr/bin/xdg-open. Instead,
>> suggest to use #!/usr/bin/env xdg-open.
> You can't rely on env being in the same place; Debian puts it in
> /usr/bin, Redhat in /bin.

That's really unlikely, as that way thousands of Perl, Python, etc.
scripts wouldn't work on RedHat out of the box. According to rpmfind the
coreutils package in RedHat9 provides /usr/bin/env.


More information about the xdg mailing list