From kde-core-devel Sat Feb 21 12:19:25 2009 From: John Tapsell Date: Sat, 21 Feb 2009 12:19:25 +0000 To: kde-core-devel Subject: Re: Update on progress [PATCH] Message-Id: <43d8ce650902210419i684715bcl8dac950eb940dac7 () mail ! gmail ! com> X-MARC-Message: https://marc.info/?l=kde-core-devel&m=123521881025044 2009/2/21 Michael Pyne : > On Friday 20 February 2009, Michael Pyne wrote: >> I've been working on KRun today (in kio) based on some discussion on IRC >> with dfaure as to where best to add the feature to make a file executable. >> My current work is attached as 2 patches. It compiles but is untested as I >> need to be awake in 6 hours for work. > > Well it looks like the feature actually works once you get around a > createKMessageBox feature I didn't know about, with the exception that I > don't add the shebang header information for xdg-open yet. > >> Again, I haven't been able to test yet, if someone does make a KRun >> testcase I'd appreciate screenshots so we can see what it look like, >> otherwise I will do so tomorrow when I get off of work and doing chores >> from my wife. ;) > > I promised a screenshot, so here it is: > http://purinchu.net/dumping-ground/krun.png In the screenshot, the text service 'mileage tracker' comes from the untrusted .desktop file itself right? So couldn't the malicious .desktop file put any service name? Such as "system. This is a vital service - so you must click continue or risk breaking your system." John