Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.os.linux.advocacy > #451543 > unrolled thread

No more launching files from Nautilus

Back to article view | Back to comp.os.linux.advocacy

Contents

  No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 15:48 -0700
    Re: No more launching files from Nautilus Melzzzzz <Melzzzzz@zzzzz.com> - 2018-05-16 23:06 +0000
      Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-16 23:14 +0000
        Re: No more launching files from Nautilus Melzzzzz <Melzzzzz@zzzzz.com> - 2018-05-16 23:25 +0000
          Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 00:16 +0000
            Re: No more launching files from Nautilus Melzzzzz <Melzzzzz@zzzzz.com> - 2018-05-17 00:38 +0000
              Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 02:12 +0000
              Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 08:45 -0400
                Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-17 07:01 -0700
              Re: No more launching files from Nautilus Your Friendly Neighbourhood Puppy Whistle Holder Emeritus 🐶笛 <root@127.0.0.1> - 2018-05-17 11:15 -0500
                Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 13:40 -0400
              Re: No more launching files from Nautilus RonB <ronb02NOSPAM@gmail.com> - 2018-05-23 20:35 +0000
                Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-23 13:47 -0700
            Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 19:48 -0700
              Re: No more launching files from Nautilus Melzzzzz <Melzzzzz@zzzzz.com> - 2018-05-17 03:02 +0000
                Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 20:14 -0700
                Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 08:55 -0400
                  Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-17 07:02 -0700
        Re: No more launching files from Nautilus Steve Carroll <frelwizzen@gmail.com> - 2018-05-18 02:43 -0700
      Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 19:46 -0700
    Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-16 23:12 +0000
      Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-16 19:45 -0700
      Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 08:39 -0400
        Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 15:56 +0000
          Re: No more launching files from Nautilus Snit <usenet@gallopinginsanity.com> - 2018-05-17 09:12 -0700
          Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 13:38 -0400
            Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 18:23 +0000
              Re: No more launching files from Nautilus Doomsdrzej <.m@nsn.s> - 2018-05-17 16:41 -0400
                Re: No more launching files from Nautilus owl <owl@rooftop.invalid> - 2018-05-17 21:08 +0000

Page 2 of 2 — ← Prev page 1 [2]

#451546

Snit <usenet@gallopinginsanity.com> wrote:
> <https://news.softpedia.com/news/gnome-devs-to-remove-the-ability-to-launch-apps-from-the-nautilus-file-manager-521137.shtml> 
> OR <https://goo.gl/PDuajk>
> -----
> GNOME Devs to Remove the Ability to Launch Apps from the Nautilus File 
> Manager
> -----
> 
> If they really do this that seems absurd... but maybe it is just a 
> developer being extreme to try to push the importance of security?
> 

World's shittiest GUI commits suicide. 
 

[toc] | [prev] | [next] | [standalone]

#451555

On 5/16/18 4:12 PM, owl wrote:
> Snit <usenet@gallopinginsanity.com> wrote:
>> <https://news.softpedia.com/news/gnome-devs-to-remove-the-ability-to-launch-apps-from-the-nautilus-file-manager-521137.shtml>
>> OR <https://goo.gl/PDuajk>
>> -----
>> GNOME Devs to Remove the Ability to Launch Apps from the Nautilus File
>> Manager
>> -----
>>
>> If they really do this that seems absurd... but maybe it is just a
>> developer being extreme to try to push the importance of security?
>>
> 
> World's shittiest GUI commits suicide.
>   
> 
I am FAR behind on Gnome, though maybe will try it again. My "play" 
hardware is ancient, though, and last time I tried it would not run on 
my VM, but maybe it will now.

Slimer was speaking of the virtual workspace system as being different 
and good... I want to play with that if nothing else.

-- 
Personal attacks from those who troll show their own insecurity. They 
cannot use reason to show the message to be wrong so they try to feel 
somehow superior by attacking the messenger.

They cling to their attacks and ignore the message time and time again.

<https://youtu.be/H4NW-Cqh308>

[toc] | [prev] | [next] | [standalone]

#451564

On Wed, 16 May 2018 23:12:59 +0000 (UTC), owl <owl@rooftop.invalid>
wrote:

>Snit <usenet@gallopinginsanity.com> wrote:
>> <https://news.softpedia.com/news/gnome-devs-to-remove-the-ability-to-launch-apps-from-the-nautilus-file-manager-521137.shtml> 
>> OR <https://goo.gl/PDuajk>
>> -----
>> GNOME Devs to Remove the Ability to Launch Apps from the Nautilus File 
>> Manager
>> -----
>> 
>> If they really do this that seems absurd... but maybe it is just a 
>> developer being extreme to try to push the importance of security?
>> 
>
>World's shittiest GUI commits suicide. 
 
I'm not sure what this means to be honest. Did Nautilus have the
ability to launch an application through double-clicking its
executable in Nautilus? I never launched an app that way, I have to
admit.

[toc] | [prev] | [next] | [standalone]

#451584

Doomsdrzej <.m@nsn.s> wrote:
> On Wed, 16 May 2018 23:12:59 +0000 (UTC), owl <owl@rooftop.invalid>
> wrote:
> 
>>Snit <usenet@gallopinginsanity.com> wrote:
>>> <https://news.softpedia.com/news/gnome-devs-to-remove-the-ability-to-launch-apps-from-the-nautilus-file-manager-521137.shtml> 
>>> OR <https://goo.gl/PDuajk>
>>> -----
>>> GNOME Devs to Remove the Ability to Launch Apps from the Nautilus File 
>>> Manager
>>> -----
>>> 
>>> If they really do this that seems absurd... but maybe it is just a 
>>> developer being extreme to try to push the importance of security?
>>> 
>>
>>World's shittiest GUI commits suicide. 
>  
> I'm not sure what this means to be honest. Did Nautilus have the
> ability to launch an application through double-clicking its
> executable in Nautilus?

Yes.

> I never launched an app that way, I have to
> admit.

I interpreted it to mean that they would not allow, for instance,
clicking on a file icon and having it launch the default application
assigned to that file type.

[toc] | [prev] | [next] | [standalone]

#451588

On 5/17/18 8:56 AM, owl wrote:
> Doomsdrzej <.m@nsn.s> wrote:
>> On Wed, 16 May 2018 23:12:59 +0000 (UTC), owl <owl@rooftop.invalid>
>> wrote:
>>
>>> Snit <usenet@gallopinginsanity.com> wrote:
>>>> <https://news.softpedia.com/news/gnome-devs-to-remove-the-ability-to-launch-apps-from-the-nautilus-file-manager-521137.shtml>
>>>> OR <https://goo.gl/PDuajk>
>>>> -----
>>>> GNOME Devs to Remove the Ability to Launch Apps from the Nautilus File
>>>> Manager
>>>> -----
>>>>
>>>> If they really do this that seems absurd... but maybe it is just a
>>>> developer being extreme to try to push the importance of security?
>>>>
>>>
>>> World's shittiest GUI commits suicide.
>>   
>> I'm not sure what this means to be honest. Did Nautilus have the
>> ability to launch an application through double-clicking its
>> executable in Nautilus?
> 
> Yes.
> 
>> I never launched an app that way, I have to
>> admit.
> 
> I interpreted it to mean that they would not allow, for instance,
> clicking on a file icon and having it launch the default application
> assigned to that file type.
> 
I think it is more not having a program launch directly (double clicking 
an executable), but I could be wrong.

And I doubt they will do it anyway.

-- 
Personal attacks from those who troll show their own insecurity. They 
cannot use reason to show the message to be wrong so they try to feel 
somehow superior by attacking the messenger.

They cling to their attacks and ignore the message time and time again.

<https://youtu.be/H4NW-Cqh308>

[toc] | [prev] | [next] | [standalone]

#451606

On Thu, 17 May 2018 15:56:17 +0000 (UTC), owl <owl@rooftop.invalid>
wrote:

>Doomsdrzej <.m@nsn.s> wrote:
>> On Wed, 16 May 2018 23:12:59 +0000 (UTC), owl <owl@rooftop.invalid>
>> wrote:
>> 
>>>Snit <usenet@gallopinginsanity.com> wrote:
>>>> <https://news.softpedia.com/news/gnome-devs-to-remove-the-ability-to-launch-apps-from-the-nautilus-file-manager-521137.shtml> 
>>>> OR <https://goo.gl/PDuajk>
>>>> -----
>>>> GNOME Devs to Remove the Ability to Launch Apps from the Nautilus File 
>>>> Manager
>>>> -----
>>>> 
>>>> If they really do this that seems absurd... but maybe it is just a 
>>>> developer being extreme to try to push the importance of security?
>>>> 
>>>
>>>World's shittiest GUI commits suicide. 
>>  
>> I'm not sure what this means to be honest. Did Nautilus have the
>> ability to launch an application through double-clicking its
>> executable in Nautilus?
>
>Yes.

I don't believe that I ever bothered to do things that way but it's
good to know. I imagine that this functionality is fairly unused
unless people have a habit of downloading a program which isn't in the
repository and launching it from their home folder. Most of what is
useful is within the repositories of most distributions though.

>> I never launched an app that way, I have to
>> admit.
>
>I interpreted it to mean that they would not allow, for instance,
>clicking on a file icon and having it launch the default application
>assigned to that file type.

That would surprise me immensely. Unless they have lots of evidence
showing that the functionality is used to infect a system or give
outsiders access to administrative controls, removing it is fairly
pointless. On the other hand, they might be looking ahead and
preventing security issues rather than reacting to them.

[toc] | [prev] | [next] | [standalone]

#451612

Doomsdrzej <.m@nsn.s> wrote:
> On Thu, 17 May 2018 15:56:17 +0000 (UTC), owl <owl@rooftop.invalid>
> wrote:
> 
>>Doomsdrzej <.m@nsn.s> wrote:
>>> On Wed, 16 May 2018 23:12:59 +0000 (UTC), owl <owl@rooftop.invalid>
>>> wrote:
>>> 
>>>>Snit <usenet@gallopinginsanity.com> wrote:
>>>>> <https://news.softpedia.com/news/gnome-devs-to-remove-the-ability-to-launch-apps-from-the-nautilus-file-manager-521137.shtml> 
>>>>> OR <https://goo.gl/PDuajk>
>>>>> -----
>>>>> GNOME Devs to Remove the Ability to Launch Apps from the Nautilus File 
>>>>> Manager
>>>>> -----
>>>>> 
>>>>> If they really do this that seems absurd... but maybe it is just a 
>>>>> developer being extreme to try to push the importance of security?
>>>>> 
>>>>
>>>>World's shittiest GUI commits suicide. 
>>>  
>>> I'm not sure what this means to be honest. Did Nautilus have the
>>> ability to launch an application through double-clicking its
>>> executable in Nautilus?
>>
>>Yes.
> 
> I don't believe that I ever bothered to do things that way but it's
> good to know. I imagine that this functionality is fairly unused
> unless people have a habit of downloading a program which isn't in the
> repository and launching it from their home folder. Most of what is
> useful is within the repositories of most distributions though.
> 
>>> I never launched an app that way, I have to
>>> admit.
>>
>>I interpreted it to mean that they would not allow, for instance,
>>clicking on a file icon and having it launch the default application
>>assigned to that file type.
> 
> That would surprise me immensely. Unless they have lots of evidence
> showing that the functionality is used to infect a system or give
> outsiders access to administrative controls, removing it is fairly
> pointless. On the other hand, they might be looking ahead and
> preventing security issues rather than reacting to them.

I don't think matters what gnome people do with respect to launching
executables from with nautilus/files.  I installed a debian 9 vm
to test these things, and no matter what desktop/file manager I
use, they are not able to launch exectubles.  The file command
shows what used to be "executables" as "shared object".  I researched
this and came upon this:

https://www.debian.org/releases/stable/amd64/release-notes/ch-information.html
<quote>

5.1.5. Executables are now compiled as position independent executables (PIE) by default

By default, the GNU GCC 6 compiler provided by Debian stretch will compile
all executables as position independent. This provides a mitigation for
an entire class of vulnerabilities.
...
The above also leads to some changes that are worth being aware of.

The file tool (among others) will classify such binaries as “shared
object” rather than an “executable”. If you have filters based on
binary files, these may need to be updated (e.g. spamfilters).

</quote> 

So I took some test X11 skeleton app code and compiled it.  Yep, "shared
object," and no file manager would run it (console would).  Some more
research led to using '-no-pie' gcc option.  Using that gives a binary
that shows up as "executable."  Using the same code, one compiled with
and one without that option, nautilus (and others) will run the one and
not run the other.

[toc] | [prev] | [next] | [standalone]

#451619

On Thu, 17 May 2018 18:23:32 +0000 (UTC), owl <owl@rooftop.invalid>
wrote:

>Doomsdrzej <.m@nsn.s> wrote:
>> On Thu, 17 May 2018 15:56:17 +0000 (UTC), owl <owl@rooftop.invalid>
>> wrote:
>> 
>>>Doomsdrzej <.m@nsn.s> wrote:
>>>> On Wed, 16 May 2018 23:12:59 +0000 (UTC), owl <owl@rooftop.invalid>
>>>> wrote:
>>>> 
>>>>>Snit <usenet@gallopinginsanity.com> wrote:
>>>>>> <https://news.softpedia.com/news/gnome-devs-to-remove-the-ability-to-launch-apps-from-the-nautilus-file-manager-521137.shtml> 
>>>>>> OR <https://goo.gl/PDuajk>
>>>>>> -----
>>>>>> GNOME Devs to Remove the Ability to Launch Apps from the Nautilus File 
>>>>>> Manager
>>>>>> -----
>>>>>> 
>>>>>> If they really do this that seems absurd... but maybe it is just a 
>>>>>> developer being extreme to try to push the importance of security?
>>>>>> 
>>>>>
>>>>>World's shittiest GUI commits suicide. 
>>>>  
>>>> I'm not sure what this means to be honest. Did Nautilus have the
>>>> ability to launch an application through double-clicking its
>>>> executable in Nautilus?
>>>
>>>Yes.
>> 
>> I don't believe that I ever bothered to do things that way but it's
>> good to know. I imagine that this functionality is fairly unused
>> unless people have a habit of downloading a program which isn't in the
>> repository and launching it from their home folder. Most of what is
>> useful is within the repositories of most distributions though.
>> 
>>>> I never launched an app that way, I have to
>>>> admit.
>>>
>>>I interpreted it to mean that they would not allow, for instance,
>>>clicking on a file icon and having it launch the default application
>>>assigned to that file type.
>> 
>> That would surprise me immensely. Unless they have lots of evidence
>> showing that the functionality is used to infect a system or give
>> outsiders access to administrative controls, removing it is fairly
>> pointless. On the other hand, they might be looking ahead and
>> preventing security issues rather than reacting to them.
>
>I don't think matters what gnome people do with respect to launching
>executables from with nautilus/files.  I installed a debian 9 vm
>to test these things, and no matter what desktop/file manager I
>use, they are not able to launch exectubles.  The file command
>shows what used to be "executables" as "shared object".  I researched
>this and came upon this:
>
>https://www.debian.org/releases/stable/amd64/release-notes/ch-information.html
><quote>
>
>5.1.5. Executables are now compiled as position independent executables (PIE) by default
>
>By default, the GNU GCC 6 compiler provided by Debian stretch will compile
>all executables as position independent. This provides a mitigation for
>an entire class of vulnerabilities.
>...
>The above also leads to some changes that are worth being aware of.
>
>The file tool (among others) will classify such binaries as “shared
>object” rather than an “executable”. If you have filters based on
>binary files, these may need to be updated (e.g. spamfilters).
>
></quote> 
>
>So I took some test X11 skeleton app code and compiled it.  Yep, "shared
>object," and no file manager would run it (console would).  Some more
>research led to using '-no-pie' gcc option.  Using that gives a binary
>that shows up as "executable."  Using the same code, one compiled with
>and one without that option, nautilus (and others) will run the one and
>not run the other.

So there's a way around it but you'd have to compile the software
yourself since everyone else will likely not use the -no pie option.

[toc] | [prev] | [next] | [standalone]

#451622

Doomsdrzej <.m@nsn.s> wrote:
> On Thu, 17 May 2018 18:23:32 +0000 (UTC), owl <owl@rooftop.invalid>
> wrote:
> 
>>Doomsdrzej <.m@nsn.s> wrote:
>>> On Thu, 17 May 2018 15:56:17 +0000 (UTC), owl <owl@rooftop.invalid>
>>> wrote:
>>> 
>>>>Doomsdrzej <.m@nsn.s> wrote:
>>>>> On Wed, 16 May 2018 23:12:59 +0000 (UTC), owl <owl@rooftop.invalid>
>>>>> wrote:
>>>>> 
>>>>>>Snit <usenet@gallopinginsanity.com> wrote:
>>>>>>> <https://news.softpedia.com/news/gnome-devs-to-remove-the-ability-to-launch-apps-from-the-nautilus-file-manager-521137.shtml> 
>>>>>>> OR <https://goo.gl/PDuajk>
>>>>>>> -----
>>>>>>> GNOME Devs to Remove the Ability to Launch Apps from the Nautilus File 
>>>>>>> Manager
>>>>>>> -----
>>>>>>> 
>>>>>>> If they really do this that seems absurd... but maybe it is just a 
>>>>>>> developer being extreme to try to push the importance of security?
>>>>>>> 
>>>>>>
>>>>>>World's shittiest GUI commits suicide. 
>>>>>  
>>>>> I'm not sure what this means to be honest. Did Nautilus have the
>>>>> ability to launch an application through double-clicking its
>>>>> executable in Nautilus?
>>>>
>>>>Yes.
>>> 
>>> I don't believe that I ever bothered to do things that way but it's
>>> good to know. I imagine that this functionality is fairly unused
>>> unless people have a habit of downloading a program which isn't in the
>>> repository and launching it from their home folder. Most of what is
>>> useful is within the repositories of most distributions though.
>>> 
>>>>> I never launched an app that way, I have to
>>>>> admit.
>>>>
>>>>I interpreted it to mean that they would not allow, for instance,
>>>>clicking on a file icon and having it launch the default application
>>>>assigned to that file type.
>>> 
>>> That would surprise me immensely. Unless they have lots of evidence
>>> showing that the functionality is used to infect a system or give
>>> outsiders access to administrative controls, removing it is fairly
>>> pointless. On the other hand, they might be looking ahead and
>>> preventing security issues rather than reacting to them.
>>
>>I don't think matters what gnome people do with respect to launching
>>executables from with nautilus/files.  I installed a debian 9 vm
>>to test these things, and no matter what desktop/file manager I
>>use, they are not able to launch exectubles.  The file command
>>shows what used to be "executables" as "shared object".  I researched
>>this and came upon this:
>>
>>https://www.debian.org/releases/stable/amd64/release-notes/ch-information.html
>><quote>
>>
>>5.1.5. Executables are now compiled as position independent executables (PIE) by default
>>
>>By default, the GNU GCC 6 compiler provided by Debian stretch will compile
>>all executables as position independent. This provides a mitigation for
>>an entire class of vulnerabilities.
>>...
>>The above also leads to some changes that are worth being aware of.
>>
>>The file tool (among others) will classify such binaries as ?shared
>>object? rather than an ?executable?. If you have filters based on
>>binary files, these may need to be updated (e.g. spamfilters).
>>
>></quote> 
>>
>>So I took some test X11 skeleton app code and compiled it.  Yep, "shared
>>object," and no file manager would run it (console would).  Some more
>>research led to using '-no-pie' gcc option.  Using that gives a binary
>>that shows up as "executable."  Using the same code, one compiled with
>>and one without that option, nautilus (and others) will run the one and
>>not run the other.
> 
> So there's a way around it but you'd have to compile the software
> yourself since everyone else will likely not use the -no pie option.

This isn't related to the gnome thing, as that has not taken effect
yet.  But given that all the software on debian 9 seems to have been
compiled like that, the future gnome thing would seem to be redundant
as far as "executables" are concerned.

[toc] | [prev] | [standalone]

Page 2 of 2 — ← Prev page 1 [2]

Back to top | Article view | comp.os.linux.advocacy

csiph-web