Security issue with .desktop files revisited

[Francois Gouget]

Dave Cridland wrote:
[...]
> You're certainly right in thinking this is a good solution, but it's not 
> one open to us, because not everywhere has extended attributes just yet.

Well, as with MAC security, this will indeed take time to put in place. 
But planning ahead is good.

If a short term solution is really needed, then requiring .desktop files 
to have the execute bit set in order to run seems to be the only 
meaningful and sane solution. But even putting that in place will take 
some time...


-- 
Francois Gouget
fgouget at codeweavers.com