[prev in list] [next in list] [prev in thread] [next in thread]
List: kde-core-devel
Subject: Re: requiring .desktop files to be executable ?
From: Michael Pyne <mpyne () purinchu ! net>
Date: 2009-02-25 2:23:14
Message-ID: 200902242123.15291.mpyne () purinchu ! net
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
On Tuesday 24 February 2009, John Tapsell wrote:
> 2009/2/24 David Faure <faure@kde.org>:
> > There is no migration tool, users are supposed to make executable by hand
> > the few desktop files that they use from $HOME or Desktop... Only they
> > can tell if it's (1) (2) or (3), that's the whole point of the security
> > measure.
>
> From the xdg list, the gnome guys are adding a migration tool. Might
> be worth you joining and voicing your objections against the idea
> there.
Or at the very least against the idea of doing it automatically without user
intervention. It's a different thing if the user asks for it.
It still doesn't guarantee every .desktop file that users need will be found
though, so I believe some kind of dialog will be necessary. I know they have
code now to perform the permissions upgrade so the dialog itself shouldn't be
too hard I would imagine.
Regards,
- Michael Pyne
[Attachment #5 (text/html)]
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" \
"http://www.w3.org/TR/REC-html40/strict.dtd"><html><head><meta name="qrichtext" content="1" /><style \
type="text/css">p, li { white-space: pre-wrap; }</style></head><body style=" font-family:'Droid Sans \
Mono'; font-size:10pt; font-weight:400; font-style:normal;">On Tuesday 24 February 2009, John Tapsell \
wrote:<br> > 2009/2/24 David Faure <faure@kde.org>:<br>
> > There is no migration tool, users are supposed to make executable by hand<br>
> > the few desktop files that they use from $HOME or Desktop... Only they<br>
> > can tell if it's (1) (2) or (3), that's the whole point of the security<br>
> > measure.<br>
><br>
> From the xdg list, the gnome guys are adding a migration tool. Might<br>
> be worth you joining and voicing your objections against the idea<br>
> there.<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; \
-qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>Or at the very least against the idea of \
doing it automatically without user intervention. It's a different thing if the user asks for it.<br> <p \
style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; \
-qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>It still doesn't guarantee every .desktop \
file that users need will be found though, so I believe some kind of dialog will be necessary. I know \
they have code now to perform the permissions upgrade so the dialog itself shouldn't be too hard I would \
imagine.<br> <p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; \
margin-right:0px; -qt-block-indent:0; text-indent:0px; \
-qt-user-state:0;"><br></p>Regards,<br>
- Michael Pyne</p></body></html>
["signature.asc" (application/pgp-signature)]
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic