[RFC] Security and Features in KPDF

Brad Hards bradh at frogmouth.net
Mon Jan 3 20:10:24 GMT 2005


On Tue, 4 Jan 2005 07:02 am, Jason Keirstead wrote:
> What are the usual kinds of command lines that users can execute from PDF
> documents? I imagine they are usually just opening  web browsers and media
> players and other such things. Couldn't these normally be executed as a
> non-priviliged user?
They could, which would be safe but less useful, because that user shouldn't 
be able to access the content that makes running the media player worthwhile. 
It could be used to access a website - that would only have "someone at this 
IP address just accessed your PDF file" type privacy implications.

What was the goal of this again? If it is just for a presentation with some 
application, then just run the application up in the background and Alt-Tab 
at an appropriate time....

Brad
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: not available
URL: <http://mail.kde.org/pipermail/kde-core-devel/attachments/20050104/5811f477/attachment.sig>


More information about the kde-core-devel mailing list