https://bugs.kde.org/show_bug.cgi?id=475080
Oded Arbel <o...@geek.co.il> changed:
What |Removed |Added
----------------------------------------------------------------------------
CC| |o...@geek.co.il
Resolution|--- |INTENTIONAL
Status|CONFIRMED |NEEDSINFO
--- Comment #1 from Oded Arbel <o...@geek.co.il> ---
I'm not sure this is needed - KDE applications, such as Kate, should support
using polkit to read and write files with root permissions. Non-KDE apps don't
use KIO and therefor can't take advantage of the "admin:///" protocol anyway.
If I understand correctly, the way the KDE desktop portal works with non-KDE
applications, is that if you use a remote protocol ("admin:///" is essentially
a remote file API), then it uses kio-fuse to mount the remote namespace on a
local temp directory so that applications that can only do local file access
can access it. Doing that to "admin:///" is a terrible practice from the point
of security - it basically gives any application that can monitor for this
kio-fuse mount, unfettered access to read and write files with root permission.
--
You are receiving this mail because:
You are watching all bug changes.
