From kde-core-devel  Mon Feb 23 05:27:52 2009
From: John Tapsell <johnflux () gmail ! com>
Date: Mon, 23 Feb 2009 05:27:52 +0000
To: kde-core-devel
Subject: Re: .desktop security changes are committed
Message-Id: <43d8ce650902222127k16e77162n15f771df7887154a () mail ! gmail ! com>
X-MARC-Message: https://marc.info/?l=kde-core-devel&m=123536691308281

2009/2/22 Michael Pyne <mpyne@purinchu.net>:
> Subject says it all. Nothing's set in stone until we release ;) so if you
> have comments/suggestions for improvement/etc. please let me know. The
> dialog is a bit different now than what I started on, hopefully this final
> version is enough to avoid "click-through":
> http://purinchu.net/dumping-ground/krun4.png I received some much
> appreciated feedback from seele (although any usability errors are of course
> my own).

Another quick thought - make sure to follow the symlink, since
symlinks are always executable.

>
> Alexander Larsson is handling the same thing for GNOME, and they have
> changed their file view to only "sniff" for desktop files that are
> executable or in the system directory, and only files with a .desktop
> extension.
> (http://mail.gnome.org/archives/desktop-devel-list/2009-February/msg00132.html)
>
> I think it'd be a good idea to continue further on and match that UI
> handling. Is there any reason we shouldn't?
>
> Regards,
> - Michael Pyne