[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [Ayatana] Executable file dialog box...
- To: Luke Benstead <kazade@xxxxxxxxx>
- Subject: Re: [Ayatana] Executable file dialog box...
- From: Remco <remco47@xxxxxxxxx>
- Date: Tue, 21 Sep 2010 14:54:37 +0200
- Cc: Ayatana List <ayatana@xxxxxxxxxxxxxxxxxxx>
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:mime-version:received:in-reply-to :references:from:date:message-id:subject:to:cc:content-type; bh=AWHoPIIybZVRbeesOYAK8nDGpjl5nbJKvE/5Ob60Xcw=; b=d3/e5peMr8L5ORqKeEcvJFv7OuzZH/QdI12lup/57lL2v5XM34fX0SnixX/re+jjtS tPlI3L9ctZC4o2dW1lTMq32KIn0UuCzGS44YvHb5S45v1F422+Ps6heJ3kH0hCtQ8wPj /FmbVq+9rjn/3CLf4tChBaJo+1hA5YpNEOPtU=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-type; b=PodPEzAuNH26mYIkMwZgXzyxIKWmn5IVciCJCwuJ+zDxNkwn47AX2cItqK2q3qUICj gmeyFZMNFC3rMQYyjY02BgcN68ig/jvD5VKeZ8yNMjkJRP+T2QFrkNE5d8lzev0fYSuN ScOQiQTq/BphTwwgBH/sVdzyTdlh6ZTkv7nPY=
- In-reply-to: <AANLkTimTeF+Yhv8FMWkcZY=ka_yKum6p5BbFYH=L6u-P@mail.gmail.com>
- List-archive: <http://lists.launchpad.net/ayatana>
- List-help: <https://help.launchpad.net/ListHelp>
- List-id: <ayatana.lists.launchpad.net>
- List-owner: <https://launchpad.net/~ayatana>
- List-post: <mailto:ayatana@lists.launchpad.net>
- List-subscribe: <https://launchpad.net/~ayatana>
- List-unsubscribe: <https://launchpad.net/~ayatana>
- References: <AANLkTimTeF+Yhv8FMWkcZY=ka_yKum6p5BbFYH=L6u-P@mail.gmail.com>
On Tue, Sep 21, 2010 at 12:38, Luke Benstead <kazade@xxxxxxxxx> wrote:
> I'm wondering if we need this dialog at all, surely we can code in a little
> bit of logic here. How about:
>
> If the file is executable and:
>
> 1. If the file is binary and the extension not associated to a program,
> attempt to run it
> or
> 2. If the file is text and has the #! line at the top, try to run it. Add
> "Run as a Program" and "Run as a Terminal Program" to the right click menu
> or
> 3. If the file is text, open it in the default editor and add "Run as a
> Program" and "Run as a Terminal Program" to the right click menu
>
> That way double clicking a file will do what the user expects most of the
> time, and give the option of alternative behaviour if necessary.
>
> Thoughts?
This may have security implications. What if the file is a malicious
bash script? GNOME attempts to help the user avoid running malicious
code. Double clicking a text file downloaded from the internet should
not be a gamble. You double click the file to study it, and suddenly
it deletes all your files.
Instead of removing the dialog, it could be simplified: "This file you
downloaded may be a program. It could be a virus. Do you want to run
the program?", with answers "Yes", "No, open in text editor", "No,
cancel".
Maybe also add a clamav scan. Since many people have Wine installed,
it is even more important to scan untrusted executable files for
viruses.
--
Remco