Security issue with .desktop files revisited

Thiago Macieira thiago at kde.org
Tue Mar 28 21:16:12 EEST 2006


Francois Gouget wrote:
>Now if desktop files were to start with '#!/usr/bin/whatever', then
>making the trusted ones executable could make sense.

#!/bin/false

There's also the sticky bit.

-- 
Thiago Macieira  -  thiago (AT) macieira.info - thiago (AT) kde.org
  thiago.macieira (AT) trolltech.com     Trolltech AS
    GPG: 0x6EF45358                   |  Sandakerveien 116,
    E067 918B B660 DBD1 105C          |  NO-0402
    966C 33F5 F005 6EF4 5358          |  Oslo, Norway
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 191 bytes
Desc: not available
Url : http://lists.freedesktop.org/archives/xdg/attachments/20060328/664b40f2/attachment.pgp 


More information about the xdg mailing list