[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-core-devel
Subject:    Re: Update on progress [PATCH]
From:       John Tapsell <johnflux () gmail ! com>
Date:       2009-02-21 12:19:25
Message-ID: 43d8ce650902210419i684715bcl8dac950eb940dac7 () mail ! gmail ! com
[Download RAW message or body]

2009/2/21 Michael Pyne <mpyne@purinchu.net>:
> On Friday 20 February 2009, Michael Pyne wrote:
>> I've been working on KRun today (in kio) based on some discussion on IRC
>> with dfaure as to where best to add the feature to make a file executable.
>> My current work is attached as 2 patches. It compiles but is untested as I
>> need to be awake in 6 hours for work.
>
> Well it looks like the feature actually works once you get around a
> createKMessageBox feature I didn't know about, with the exception that I
> don't add the shebang header information for xdg-open yet.
>
>> Again, I haven't been able to test yet, if someone does make a KRun
>> testcase I'd appreciate screenshots so we can see what it look like,
>> otherwise I will do so tomorrow when I get off of work and doing chores
>> from my wife. ;)
>
> I promised a screenshot, so here it is:
> http://purinchu.net/dumping-ground/krun.png

In the screenshot, the text service 'mileage tracker' comes from the
untrusted .desktop file itself right?  So couldn't the malicious
.desktop file put any service name?  Such as "system.  This is a vital
service - so you must click continue or risk breaking your system."

John
[prev in list] [next in list] [prev in thread] [next in thread]