Security issue with .desktop files revisited

Lennon Cook maguswizardo at gmail.com
Sat Mar 25 00:13:44 EET 2006


Mike Hearn wrote:
> Only for .desktop files without the +x bit, and that would be set whenever
> a desktop shortcut is created or the user says to continue (ie that it's
> safe).
If a potentially dangerous .desktop file gets through the QA process,
and is installed on an end-user system, it isn't a leap of faith to
think that it could have +x by default.

--
Lennon Victor Cook
"He who receives an idea from me receives without lessening, as he who
lights his candle at mine receives light without darkening" - Thomas
Jefferson



More information about the xdg mailing list