executable .desktop files

Thiago Macieira thiago at kde.org
Thu Aug 21 13:54:02 PDT 2008


Egon Kocjan wrote:
>Sure. If I'm not mistaken, there's no other solution, that gives you
>instant double-clickable executables on standard gnome/kde/xfce
>desktops.

That's intentional.

Users should have to turn something into executable before it's allowed to 
continue.

Self-packed .desktop files are a security risk (raised more than two years 
ago) and should be fixed. Especially since .desktop can change its own 
icon and masquerade as an innocuous JPEG file, for instance.

-- 
  Thiago Macieira  -  thiago (AT) macieira.info - thiago (AT) kde.org
    PGP/GPG: 0x6EF45358; fingerprint:
    E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: This is a digitally signed message part.
Url : http://lists.freedesktop.org/archives/xdg/attachments/20080821/66189834/attachment.pgp 


More information about the xdg mailing list