[kde-linux] Program Warning Messages

[Kevin Krammer]

On Monday, 2010-03-22, David Baron wrote:
> I finally got my daughter's account going in kde4.4. Copied her .kde3 to
>  .kde and loggod on. Eventually, she had a desktop. Set her up with the
>  desktop folder containment and all her icons are there.
> 
> Whenever she clicks one, say to play the selected game, a box comes up
> confirming whether the selected program can be trusted. I never say this on
> any other user, kde3, kde4, nothing.
> 
> How do I get rid of this?

I think this is an additional security measure [1] when .desktop files are 
"run" but don't have the executable bit set.

So this should be solvable by changing these files' properties to have the "x" 
bit set.

Cheers,
Kevin

[1] there has been a lengthy discussion around this topic on the main 
freedesktop.org list some time ago.
Basically the problem is that .desktop files were originally intended to be 
used by starter menu implementation and then got used for desktop icons/links 
as well due to the similar requirements.

Unfortunately "running" .desktop files did not require the executable bit to 
be set and since they can run any command they could be used to easily trick 
people into running bad things.

Thus the additional warning but not requiring executable bit for compatibility 
(this might be changed in the future)
-- 
Kevin Krammer, KDE developer, xdg-utils developer
KDE user support, developer mentoring
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 190 bytes
Desc: This is a digitally signed message part.
URL: <http://mail.kde.org/pipermail/kde-linux/attachments/20100322/dcdcd437/attachment.sig>