[prev in list] [next in list] [prev in thread] [next in thread] 

List:       kde-usability
Subject:    Re: [PATCH] kdesu dialog simplification
From:       "Manuel Amador (Rudd-O)" <amadorm () usm ! edu ! ec>
Date:       2003-12-20 0:58:31
[Download RAW message or body]

[Attachment #2 (multipart/signed)]


El vie, 19-12-2003 a las 07:07, Waldo Bastian escribió:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> On Fri December 19 2003 08:07, Frans Englich wrote:
> > Hi all,
> >
> >   Patch below removes the line in the kdesu dialog which tells what command
> > it was feeded, ie. "Command: /usr/local/kde_stable/bin/kcmshell clock
> > --lang en_US".
> >
> > Reasons why it's bad to have that line:
> > * It is not informative.
> 
> It's there to avoid being tricked into running things such as "rm -rf /" as 
> root.
> 
> It's probably not very effective since "/bin/bash /tmp/configure_clock" looks 
> harmless but could easily do the same.

And for unwary users, it would even look the same ;-)

> 
> Cheers,
> Waldo
> - -- 
> bastian@kde.org -=|[ KDE: K Desktop for the Enterprise ]|=- bastian@suse.com
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.0.6 (GNU/Linux)
> Comment: For info see http://www.gnupg.org
> 
> iD8DBQE/4uoCN4pvrENfboIRAvBVAJ9KVMlOAQ6WPd2hSQHAuyR7JTgbtACfQewR
> 9mO2TAX4JCE1TMoqCMtLs2g=
> =QjMd
> -----END PGP SIGNATURE-----
> _______________________________________________
> kde-usability mailing list
> kde-usability@mail.kde.org
> https://mail.kde.org/mailman/listinfo/kde-usability
-- 
	Manuel Amador (Rudd-O)
	GPG key ID: keyserver.net C1033CAD

["signature.asc" (application/pgp-signature)]

_______________________________________________
kde-usability mailing list
kde-usability@mail.kde.org
https://mail.kde.org/mailman/listinfo/kde-usability


[prev in list] [next in list] [prev in thread] [next in thread]