Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]
Groups > comp.os.linux.advocacy > #451622
| From | owl <owl@rooftop.invalid> |
|---|---|
| Newsgroups | comp.os.linux.advocacy |
| Subject | Re: No more launching files from Nautilus |
| Date | 2018-05-17 21:08 +0000 |
| Organization | O.W.L. |
| Message-ID | <a9zxc8b083.a4@rooftop.invalid> (permalink) |
| References | (2 earlier) <dttqfd1rs5jkdsb20pe944mcio5n9p74a0@4ax.com> <a980zb4.bi@rooftop.invalid> <gbfrfd9m5p4mu7hltjhuhm5bbv691kq63v@4ax.com> <98a0aba.au1uo3@rooftop.invalid> <p5qrfd1vdm3oohb6e991rl1tuk2ji3tied@4ax.com> |
Doomsdrzej <.m@nsn.s> wrote: > On Thu, 17 May 2018 18:23:32 +0000 (UTC), owl <owl@rooftop.invalid> > wrote: > >>Doomsdrzej <.m@nsn.s> wrote: >>> On Thu, 17 May 2018 15:56:17 +0000 (UTC), owl <owl@rooftop.invalid> >>> wrote: >>> >>>>Doomsdrzej <.m@nsn.s> wrote: >>>>> On Wed, 16 May 2018 23:12:59 +0000 (UTC), owl <owl@rooftop.invalid> >>>>> wrote: >>>>> >>>>>>Snit <usenet@gallopinginsanity.com> wrote: >>>>>>> <https://news.softpedia.com/news/gnome-devs-to-remove-the-ability-to-launch-apps-from-the-nautilus-file-manager-521137.shtml> >>>>>>> OR <https://goo.gl/PDuajk> >>>>>>> ----- >>>>>>> GNOME Devs to Remove the Ability to Launch Apps from the Nautilus File >>>>>>> Manager >>>>>>> ----- >>>>>>> >>>>>>> If they really do this that seems absurd... but maybe it is just a >>>>>>> developer being extreme to try to push the importance of security? >>>>>>> >>>>>> >>>>>>World's shittiest GUI commits suicide. >>>>> >>>>> I'm not sure what this means to be honest. Did Nautilus have the >>>>> ability to launch an application through double-clicking its >>>>> executable in Nautilus? >>>> >>>>Yes. >>> >>> I don't believe that I ever bothered to do things that way but it's >>> good to know. I imagine that this functionality is fairly unused >>> unless people have a habit of downloading a program which isn't in the >>> repository and launching it from their home folder. Most of what is >>> useful is within the repositories of most distributions though. >>> >>>>> I never launched an app that way, I have to >>>>> admit. >>>> >>>>I interpreted it to mean that they would not allow, for instance, >>>>clicking on a file icon and having it launch the default application >>>>assigned to that file type. >>> >>> That would surprise me immensely. Unless they have lots of evidence >>> showing that the functionality is used to infect a system or give >>> outsiders access to administrative controls, removing it is fairly >>> pointless. On the other hand, they might be looking ahead and >>> preventing security issues rather than reacting to them. >> >>I don't think matters what gnome people do with respect to launching >>executables from with nautilus/files. I installed a debian 9 vm >>to test these things, and no matter what desktop/file manager I >>use, they are not able to launch exectubles. The file command >>shows what used to be "executables" as "shared object". I researched >>this and came upon this: >> >>https://www.debian.org/releases/stable/amd64/release-notes/ch-information.html >><quote> >> >>5.1.5. Executables are now compiled as position independent executables (PIE) by default >> >>By default, the GNU GCC 6 compiler provided by Debian stretch will compile >>all executables as position independent. This provides a mitigation for >>an entire class of vulnerabilities. >>... >>The above also leads to some changes that are worth being aware of. >> >>The file tool (among others) will classify such binaries as ?shared >>object? rather than an ?executable?. If you have filters based on >>binary files, these may need to be updated (e.g. spamfilters). >> >></quote> >> >>So I took some test X11 skeleton app code and compiled it. Yep, "shared >>object," and no file manager would run it (console would). Some more >>research led to using '-no-pie' gcc option. Using that gives a binary >>that shows up as "executable." Using the same code, one compiled with >>and one without that option, nautilus (and others) will run the one and >>not run the other. > > So there's a way around it but you'd have to compile the software > yourself since everyone else will likely not use the -no pie option. This isn't related to the gnome thing, as that has not taken effect yet. But given that all the software on debian 9 seems to have been compiled like that, the future gnome thing would seem to be redundant as far as "executables" are concerned.
Back to comp.os.linux.advocacy | Previous | Next — Previous in thread | Find similar | Unroll thread
No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 15:48 -0700
Re: No more launching files from Nautilus Melzzzzz <Melzzzzz@zzzzz.com> - 2018-05-16 23:06 +0000
Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-16 23:14 +0000
Re: No more launching files from Nautilus Melzzzzz <Melzzzzz@zzzzz.com> - 2018-05-16 23:25 +0000
Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 00:16 +0000
Re: No more launching files from Nautilus Melzzzzz <Melzzzzz@zzzzz.com> - 2018-05-17 00:38 +0000
Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 02:12 +0000
Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 08:45 -0400
Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-17 07:01 -0700
Re: No more launching files from Nautilus Your Friendly Neighbourhood Puppy Whistle Holder Emeritus 🐶笛 <root@127.0.0.1> - 2018-05-17 11:15 -0500
Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 13:40 -0400
Re: No more launching files from Nautilus RonB <ronb02NOSPAM@gmail.com> - 2018-05-23 20:35 +0000
Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-23 13:47 -0700
Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 19:48 -0700
Re: No more launching files from Nautilus Melzzzzz <Melzzzzz@zzzzz.com> - 2018-05-17 03:02 +0000
Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 20:14 -0700
Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 08:55 -0400
Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-17 07:02 -0700
Re: No more launching files from Nautilus Steve Carroll <frelwizzen@gmail.com> - 2018-05-18 02:43 -0700
Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 19:46 -0700
Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-16 23:12 +0000
Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 19:45 -0700
Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 08:39 -0400
Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 15:56 +0000
Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-17 09:12 -0700
Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 13:38 -0400
Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 18:23 +0000
Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 16:41 -0400
Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 21:08 +0000
csiph-web