Exec in .desktop (was Re: Security issue with .desktop files revisited)

Vincent Untz vuntz at gnome.org
Thu Mar 30 08:11:50 EEST 2006

Le mercredi 29 mars 2006 à 15:50 +0200, Francois Gouget a écrit :
> Vincent Untz wrote:
> > On Tue, March 28, 2006 11:32, Francois Gouget wrote:
> > 
> >>Not even. First KDE, at least, lets you specify multiple commands
> >>separated by semi-colon so you could drop the 'sh -c':
> >>
> >>Exec=/usr/X11R6/bin/xeyes;/usr/X11R6/bin/xeyes
> > 
> > Wow. Does the spec allow this?
> I believe that at one time I saw something that said the content of the 
> Exec line must be in the same format as for 'sh -c' or that it was 
> executed using 'sh -c' or something to that effect. I'm not sure where I 
> saw that and I may be confusing this with something else. The specs 
> would need combing to be sure.
> I will also note that using '&' instead of ';' did not work. And also 
> that this issue of what's allowed on the Exec line is an interesting 
> point in its own right, but not particularly relevant to the issue at hand.

I know it's irrelevant to the "security" issue and that's why I changed
the subject.

My point is really what should be done about this feature: do we want to
update the spec to make it clear this is allowed or is it really
something that should not be done? GNOME doesn't support this right now.


Les gens heureux ne sont pas pressés.

More information about the xdg mailing list