Proposal: dlopening the file dialog

John Tapsell johnflux at gmail.com
Mon Apr 2 12:41:05 BST 2007


The file daemon idea is probably not that feasible (people like to
modify the dialogs etc.)  but it would have one big advantage if done
properly - it would let you secure a system much better.

Currently one biggish problem with selinux (for example) is that you
can't currently say "firefox shouldn't write to disk" because the user
might download and save a file.  Using a daemon that popped up a file
open/save  dialog, and then opened the file and somehow passed the
file descriptor back, would mean that you could then use selinux to
stop firefox from opening any file (apart from config files etc).

(I just used firefox as an example to avoid the details about using it
with khtml)

JohnFlux




More information about the kde-core-devel mailing list