Update on progress [PATCH]

[John Tapsell]

2009/2/21 Michael Pyne <mpyne at purinchu.net>:
> On Friday 20 February 2009, Michael Pyne wrote:
>> I've been working on KRun today (in kio) based on some discussion on IRC
>> with dfaure as to where best to add the feature to make a file executable.
>> My current work is attached as 2 patches. It compiles but is untested as I
>> need to be awake in 6 hours for work.
>
> Well it looks like the feature actually works once you get around a
> createKMessageBox feature I didn't know about, with the exception that I
> don't add the shebang header information for xdg-open yet.
>
>> Again, I haven't been able to test yet, if someone does make a KRun
>> testcase I'd appreciate screenshots so we can see what it look like,
>> otherwise I will do so tomorrow when I get off of work and doing chores
>> from my wife. ;)
>
> I promised a screenshot, so here it is:
> http://purinchu.net/dumping-ground/krun.png

In the screenshot, the text service 'mileage tracker' comes from the
untrusted .desktop file itself right?  So couldn't the malicious
.desktop file put any service name?  Such as "system.  This is a vital
service - so you must click continue or risk breaking your system."

John