On Fri, 22 Jun 2018 at 13:52, Till Maas <opensou...@till.name> wrote:
[..]
> No, it does not change everything as attackers can also just copy
> desktop files with other Exec-Keys to
>
> /home/till/.local/share/applications, for example like this:
>
> sed -e s,Exec=.*,Exec=xmessage\ pwned,
> /usr/share/applications/firefox.desktop >
> ~/.local/share/applications/firefox.desktop
>
> There is no need to drop something in the path to manipulate desktop
> files/the applications that are started (I verified this with Gnome on
> Fedora 28). Please stop with these false claims.

Yep, It is known. Few people have been trying to convince other people
to ignore any Exec lines in ~/.local/share/applications/*desktop files
to allow icons or menu entries texts changes still possible or at
least make this as the desktop settings option. So far no success.

kloczek
-- 
Tomasz Kłoczko | LinkedIn: http://lnkd.in/FXPWxH
_______________________________________________
devel mailing list -- devel@lists.fedoraproject.org
To unsubscribe send an email to devel-le...@lists.fedoraproject.org
Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: 
https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2O2GXACHISCCAFXXCMWZ4G4G6H637LVS/

Reply via email to