Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.advocacy > #451612

Re: No more launching files from Nautilus

Show all headers | View raw

Doomsdrzej <.m@nsn.s> wrote:
> On Thu, 17 May 2018 15:56:17 +0000 (UTC), owl <owl@rooftop.invalid>
> wrote:
> 
>>Doomsdrzej <.m@nsn.s> wrote:
>>> On Wed, 16 May 2018 23:12:59 +0000 (UTC), owl <owl@rooftop.invalid>
>>> wrote:
>>> 
>>>>Snit <usenet@gallopinginsanity.com> wrote:
>>>>> <https://news.softpedia.com/news/gnome-devs-to-remove-the-ability-to-launch-apps-from-the-nautilus-file-manager-521137.shtml> 
>>>>> OR <https://goo.gl/PDuajk>
>>>>> -----
>>>>> GNOME Devs to Remove the Ability to Launch Apps from the Nautilus File 
>>>>> Manager
>>>>> -----
>>>>> 
>>>>> If they really do this that seems absurd... but maybe it is just a 
>>>>> developer being extreme to try to push the importance of security?
>>>>> 
>>>>
>>>>World's shittiest GUI commits suicide. 
>>>  
>>> I'm not sure what this means to be honest. Did Nautilus have the
>>> ability to launch an application through double-clicking its
>>> executable in Nautilus?
>>
>>Yes.
> 
> I don't believe that I ever bothered to do things that way but it's
> good to know. I imagine that this functionality is fairly unused
> unless people have a habit of downloading a program which isn't in the
> repository and launching it from their home folder. Most of what is
> useful is within the repositories of most distributions though.
> 
>>> I never launched an app that way, I have to
>>> admit.
>>
>>I interpreted it to mean that they would not allow, for instance,
>>clicking on a file icon and having it launch the default application
>>assigned to that file type.
> 
> That would surprise me immensely. Unless they have lots of evidence
> showing that the functionality is used to infect a system or give
> outsiders access to administrative controls, removing it is fairly
> pointless. On the other hand, they might be looking ahead and
> preventing security issues rather than reacting to them.

I don't think matters what gnome people do with respect to launching
executables from with nautilus/files.  I installed a debian 9 vm
to test these things, and no matter what desktop/file manager I
use, they are not able to launch exectubles.  The file command
shows what used to be "executables" as "shared object".  I researched
this and came upon this:

https://www.debian.org/releases/stable/amd64/release-notes/ch-information.html
<quote>

5.1.5. Executables are now compiled as position independent executables (PIE) by default

By default, the GNU GCC 6 compiler provided by Debian stretch will compile
all executables as position independent. This provides a mitigation for
an entire class of vulnerabilities.
...
The above also leads to some changes that are worth being aware of.

The file tool (among others) will classify such binaries as “shared
object” rather than an “executable”. If you have filters based on
binary files, these may need to be updated (e.g. spamfilters).

</quote> 

So I took some test X11 skeleton app code and compiled it.  Yep, "shared
object," and no file manager would run it (console would).  Some more
research led to using '-no-pie' gcc option.  Using that gives a binary
that shows up as "executable."  Using the same code, one compiled with
and one without that option, nautilus (and others) will run the one and
not run the other.

Back to comp.os.linux.advocacy | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 15:48 -0700
  Re: No more launching files from Nautilus Melzzzzz <Melzzzzz@zzzzz.com> - 2018-05-16 23:06 +0000
    Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-16 23:14 +0000
      Re: No more launching files from Nautilus Melzzzzz <Melzzzzz@zzzzz.com> - 2018-05-16 23:25 +0000
        Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 00:16 +0000
          Re: No more launching files from Nautilus Melzzzzz <Melzzzzz@zzzzz.com> - 2018-05-17 00:38 +0000
            Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 02:12 +0000
            Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 08:45 -0400
              Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-17 07:01 -0700
            Re: No more launching files from Nautilus Your Friendly Neighbourhood Puppy Whistle Holder Emeritus 🐶笛 <root@127.0.0.1> - 2018-05-17 11:15 -0500
              Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 13:40 -0400
            Re: No more launching files from Nautilus RonB <ronb02NOSPAM@gmail.com> - 2018-05-23 20:35 +0000
              Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-23 13:47 -0700
          Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 19:48 -0700
            Re: No more launching files from Nautilus Melzzzzz <Melzzzzz@zzzzz.com> - 2018-05-17 03:02 +0000
              Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 20:14 -0700
              Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 08:55 -0400
                Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-17 07:02 -0700
      Re: No more launching files from Nautilus Steve Carroll <frelwizzen@gmail.com> - 2018-05-18 02:43 -0700
    Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 19:46 -0700
  Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-16 23:12 +0000
    Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 19:45 -0700
    Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 08:39 -0400
      Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 15:56 +0000
        Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-17 09:12 -0700
        Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 13:38 -0400
          Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 18:23 +0000
            Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 16:41 -0400
              Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 21:08 +0000

csiph-web