relative paths in Exec= in .desktop and .service files

Thiago Macieira thiago at kde.org
Wed Sep 10 11:40:18 PDT 2014


On Tuesday 09 September 2014 18:01:55 Jon Watte wrote:
> > Simon's email explained the use-case: relocatable installations,
> > especially on
> > Windows.
> 
> I don't think that's strong enough to open up a security can of worms.
> If you want relocation, use some token system (like how Scons has "#" for
> "root of build")
> And if the main use case is for Windows, then again I'd look carefully at
> actual numbers of users/installs and ability to capture that market, and
> discount the value of that support appropriately.
> Maybe not everyone agrees with that sentiment, but it's a largely
> observable truth :-)

If you feel there are security implications, please say so. If there are 
issues, then the desktop spec needs to address them one way or another. We 
could choose one of Simon's three suggestions or outright ban the practice. 
But all desktops need to be fixed to deal with this correctly.

I also fail to see how having a token is any better than declaring relative 
paths to be searched from $PWD. Can you shed more light on this suggestion?

In any case, D-Bus would like to follow the same specification as .desktop 
files, but it could diverge if necessary to meet its unique requirements.

-- 
Thiago Macieira - thiago (AT) macieira.info - thiago (AT) kde.org
   Software Architect - Intel Open Source Technology Center
      PGP/GPG: 0x6EF45358; fingerprint:
      E067 918B B660 DBD1 105C  966C 33F5 F005 6EF4 5358



More information about the xdg mailing list