Web lists-archives.com

Re: [kde-linux] Program Warning Messages

On Monday, 2010-03-22, David Baron wrote:
> I finally got my daughter's account going in kde4.4. Copied her .kde3 to
>  .kde and loggod on. Eventually, she had a desktop. Set her up with the
>  desktop folder containment and all her icons are there.
> Whenever she clicks one, say to play the selected game, a box comes up
> confirming whether the selected program can be trusted. I never say this on
> any other user, kde3, kde4, nothing.
> How do I get rid of this?

I think this is an additional security measure [1] when .desktop files are 
"run" but don't have the executable bit set.

So this should be solvable by changing these files' properties to have the "x" 
bit set.


[1] there has been a lengthy discussion around this topic on the main 
freedesktop.org list some time ago.
Basically the problem is that .desktop files were originally intended to be 
used by starter menu implementation and then got used for desktop icons/links 
as well due to the similar requirements.

Unfortunately "running" .desktop files did not require the executable bit to 
be set and since they can run any command they could be used to easily trick 
people into running bad things.

Thus the additional warning but not requiring executable bit for compatibility 
(this might be changed in the future)
Kevin Krammer, KDE developer, xdg-utils developer
KDE user support, developer mentoring

Attachment: signature.asc
Description: This is a digitally signed message part.

This message is from the kde-linux mailing list.
Account management:  https://mail.kde.org/mailman/listinfo/kde-linux.
Archives: http://lists.kde.org/.
More info: http://www.kde.org/faq.html.