On Fri, 22 Jun 2018 at 13:52, Till Maas <opensource@xxxxxxxxx> wrote: [..] > No, it does not change everything as attackers can also just copy > desktop files with other Exec-Keys to > > /home/till/.local/share/applications, for example like this: > > sed -e s,Exec=.*,Exec=xmessage\ pwned, > /usr/share/applications/firefox.desktop > > ~/.local/share/applications/firefox.desktop > > There is no need to drop something in the path to manipulate desktop > files/the applications that are started (I verified this with Gnome on > Fedora 28). Please stop with these false claims. Yep, It is known. Few people have been trying to convince other people to ignore any Exec lines in ~/.local/share/applications/*desktop files to allow icons or menu entries texts changes still possible or at least make this as the desktop settings option. So far no success. kloczek -- Tomasz Kłoczko | LinkedIn: http://lnkd.in/FXPWxH _______________________________________________ devel mailing list -- devel@xxxxxxxxxxxxxxxxxxxxxxx To unsubscribe send an email to devel-leave@xxxxxxxxxxxxxxxxxxxxxxx Fedora Code of Conduct: https://getfedora.org/code-of-conduct.html List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/devel@xxxxxxxxxxxxxxxxxxxxxxx/message/2O2GXACHISCCAFXXCMWZ4G4G6H637LVS/
