• Carlos Soriano's avatar
    general: Don't allow launching binaries or programs in general · 3a22ed5b
    Carlos Soriano authored
    For long we used to support that since the desktop was part of Nautilus.
    Also, back then we didn't have a Software app where you are expected to
    installs apps. Back then it was common for apps to be delivered in
    a tarball, nowadays that's out of question.
    
    Now that the desktop is long gone, launching binaries and desktop files
    from within Nautilus is not as useful. Not only that, but we are moving
    towards a more sandboxed system, and we should use the standard and
    system wide support for launching apps based on users choices.
    
    We also are not able to be secure enough to handle this, as we saw in
    the past we allowed untrusted binaries to be launched, and therefore
    we had a CVE (CVE-2017-14604) for Nautilus. We are not being audited
    (afaik) and we are not in a position that we can let this issues slip.
    
    With that altogether, this prevents launching binaries or programs from
    Nautilus.
    
    Closes: #184
    3a22ed5b
Name
Last commit
Last update
.gitlab/issue_templates Loading commit data...
build-aux Loading commit data...
data Loading commit data...
docs Loading commit data...
eel Loading commit data...
extensions Loading commit data...
icons Loading commit data...
libnautilus-extension Loading commit data...
po Loading commit data...
src Loading commit data...
subprojects Loading commit data...
test Loading commit data...
.gitattributes Loading commit data...
.gitignore Loading commit data...
.gitlab-ci.yml Loading commit data...
.gitmodules Loading commit data...
LICENSE Loading commit data...
NEWS Loading commit data...
README.md Loading commit data...
meson.build Loading commit data...
meson_options.txt Loading commit data...
nautilus.doap Loading commit data...