On Thu 19 February 2009 12.44.23 David Faure wrote: > OK, with both conditions it doesn't break the case of a FAT partition > (where everything is owned by root *and* writable by the user). > > So we arrive at the following whitelist: > * x-bit is set > * in a standard path (xdgdata-apps, apps, services) (*) > * owned by root and not writable by user > > (*) I guess we should not add the Autostart folder to it, to protect > the user from "save this file into your autostart folder", although, > well, that would be a rather suspicious instruction in the first > place... hash-bang line? And what flashed through my brain was the idea of creating a binfmt module for the kernel. -- R.F. Pels, Boogerd 1, 1791 GW Den Burg, Texel, The Netherlands +31612914545 ruurd@tiscali.nl http://home.tiscali.nl/~ruurd