Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 29 Aug 2012 04:29:57 +0200
From:      Alberto Villa <avilla@FreeBSD.org>
To:        Alexey Dokuchaev <danfe@freebsd.org>
Cc:        svn-ports-head@freebsd.org, svn-ports-all@freebsd.org, ports-committers@freebsd.org, Chris Rees <crees@freebsd.org>, Thomas Abthorpe <tabthorpe@freebsd.org>, Tijl Coosemans <tijl@freebsd.org>, Guido Falsi <madpilot@freebsd.org>
Subject:   Re: svn commit: r303278 - in head/games/simutrans: . files
Message-ID:  <CAJp7RHZF2coC2JqRmUq3_CpEtpjog-Egm541ZJyX-ZFTpx8uyA@mail.gmail.com>
In-Reply-To: <20120829021251.GA13534@FreeBSD.org>
References:  <201208281203.q7SC3jU7063943@svn.freebsd.org> <20120828145248.GC87067@FreeBSD.org> <503D1845.4090509@FreeBSD.org> <CADLo838FWg2NH7OkiaRDuqFnWgMRev9ZVbuO%2ByVu9sv%2B8bbJow@mail.gmail.com> <20120829021251.GA13534@FreeBSD.org>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, Aug 29, 2012 at 4:12 AM, Alexey Dokuchaev <danfe@freebsd.org> wrote:
> It does, however, it means that we've been installing .desktop files with
> wrong permissions for a long time in the past, and no one spoke up.  This is
> strange, and should be investigated.  I also support the idea to hear some
> competent answer from KDE people.

I'm not a competent KDE guy, but I'm from kde@ so I'll try to give my answer.

First thing first: a discussion about the problem was actually
started, as you can see, but never went on. It should be discussed on
desktop@, by the way.

> For start, I'm curious if KDE wants +x
> bit on .desktop files within ${HOME}, where protection against malicious or
> downloaded files makes sense, or across entire filesystem?

KDE .desktop files are installed with +x by default (as noted in my
email on that thread). Still, it appears that we have a problem (check
last mail on the thread) which I'll try to solve.

> In any case, I want one standard way of installing .desktop files, either
> with (although I a bit worry about +x on a file what cannot be directly
> executed), or without (looks better, but possible security implications are
> more important).

That's something I'd like to handle via the desktop@ initiative (hint:
the same for icons, mimetypes, and fonts, at least).
-- 
Alberto Villa, FreeBSD committer <avilla@FreeBSD.org>
http://people.FreeBSD.org/~avilla



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?CAJp7RHZF2coC2JqRmUq3_CpEtpjog-Egm541ZJyX-ZFTpx8uyA>