<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0//EN" "http://www.w3.org/TR/REC-html40/strict.dtd"><html><head><meta name="qrichtext" content="1" /><style type="text/css">p, li { white-space: pre-wrap; }</style></head><body style=" font-family:'Consolas'; font-size:11pt; font-weight:400; font-style:normal;">On Wednesday 18 February 2009, David Faure wrote:<br>
> On Wednesday 18 February 2009, John Tapsell wrote:<br>
> > 2009/2/18 David Faure <faure@kde.org>:<br>
> > > On Wednesday 18 February 2009, John Tapsell wrote:<br>
> > >> 2009/2/18 Michael Pyne <mpyne@purinchu.net>:<br>
> > >> > On Tuesday 17 February 2009, John Tapsell wrote:<br>
> > >> >> Let's not let this thread die again. It is really important to come<br>
> > >> >> to a solution.<br>
> > >> >><br>
> > >> >> How about allowing execution if any of following conditions are<br>
> > >> >> set: * x-bit it set<br>
> > >> >> * owned by root<br>
> > >> >> * In a standard path<br>
> > ><br>
> > > Sounds good to me.<br>
> > ><br>
> > >> > Why allow both root exception and std path exception? It seems to me<br>
> > >> > that they cover the same case.<br>
> > ><br>
> > > No they don't, my $KDEDIR is not owned by root, and yet I don't want to<br>
> > > have to +x every single desktop in it ;-)<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>I thought that we would be counting KDEDIRS and XDG_DATA_DIRS (or whichever is correct) as part of the "standard paths" and not /usr (which should already be present).<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>> > >> How about allowing execution if any of following conditions are set:<br>
> > >> * x-bit it set<br>
> > >> * owned by root, and not writable by current user (if they aren't<br>
> > >> root) * In a standard path, not writable by current user (if they<br>
> > >> aren't root)<br>
> > ><br>
> > > I don't see what's "bad" about writable by current user.<br>
> > > And again this would break the user-owned $KDEDIR case.<br>
> ><br>
> > I was just thinking of the case where Desktop is a fat32 partition<br>
> > (usb key, nfs, or something) so the files are all owned by root and<br>
> > are writable.<br>
><br>
> We could remove the "owned by root" from the initial list above, then.<br>
> Users rarely go in /usr/something/notstandard and click on .desktop<br>
> files... I think it's enough to allow execution of desktop files from<br>
> `kde4-config --path xdgdata-apps`.<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>Exactly what I'm talking about actually :)<br>
<p style="-qt-paragraph-type:empty; margin-top:0px; margin-bottom:0px; margin-left:0px; margin-right:0px; -qt-block-indent:0; text-indent:0px; -qt-user-state:0;"><br></p>Regards,<br>
- Michael Pyne</p></body></html>