Security issue with .desktop files revisited

Benedikt Meurer benny at xfce.org
Tue Apr 11 20:16:51 EEST 2006


Sam Morris wrote:
>>> A viable strategy would be to start creating .desktop files with +x set
>>> and a #!/usr/bin/xdg-open line now and then to wait a while before
>>> environments actually start requiring it.
>>
>> Please do not encourage people to hardcode /usr/bin/xdg-open. Instead,
>> suggest to use #!/usr/bin/env xdg-open.
> 
> You can't rely on env being in the same place; Debian puts it in
> /usr/bin, Redhat in /bin.

That's really unlikely, as that way thousands of Perl, Python, etc.
scripts wouldn't work on RedHat out of the box. According to rpmfind the
coreutils package in RedHat9 provides /usr/bin/env.

Benedikt



More information about the xdg mailing list