Should this apply to interpreted script files too?
Such as Python, Ruby, and Perl scripts?
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in Ubuntu.
https://bugs.launchpad.net/bugs/506702
Title:
needs to block non-executa
er.. sorry, not entirely related :)
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
--
desktop-bugs mailing list
desktop-bu
I think that this fix has just caused a bug on sun java6:
https://bugs.launchpad.net/bugs/568707
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to
Fixed sun-java6 in lucid
** Changed in: sun-java6 (Ubuntu)
Status: Fix Committed => Fix Released
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subsc
** Branch linked: lp:~voronov84/+junk/sun-java6
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
--
desktop-bugs mailing lis
** Changed in: nautilus (Ubuntu)
Status: In Progress => Fix Released
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
** Changed in: sun-java6 (Ubuntu)
Status: In Progress => Fix Committed
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
** Changed in: wine1.2 (Ubuntu)
Importance: Undecided => High
** Changed in: wine1.2 (Ubuntu)
Assignee: (unassigned) => Kees Cook (kees)
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a membe
** Branch linked: lp:ubuntu/wine1.2
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
--
desktop-bugs mailing list
desktop-bu
This bug was fixed in the package wine1.2 - 1.1.36-0ubuntu2
---
wine1.2 (1.1.36-0ubuntu2) lucid; urgency=low
* Port to Lucid
* Port Kees' changes from wine package:
* debian/{control,*.lpia}: removed lpia arch since it is not supported.
* debian/rules: support "parallel=N"
On 19.01.2010 16:46, Kees Cook wrote:
>
> ** Attachment added: "sun-java6_6-16-1ubuntu1.debdiff"
> http://launchpadlibrarian.net/38089345/sun-java6_6-16-1ubuntu1.debdiff
having the patch in this form is a major pain for uploads to older releases.
please conditionalize this not to apply for an
** Attachment added: "sun-java6_6-16-1ubuntu1.debdiff"
http://launchpadlibrarian.net/38089345/sun-java6_6-16-1ubuntu1.debdiff
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desk
Malicious software in Windows has been known to try getting past simple
file type checks by spreading a zip file containing the actual
executable.
In our case, a user could get a tarball containing an executable with
the +x bit set from a malicious user.
Perhaps make file-roller ask the user befo
** Also affects: wine1.2 (Ubuntu)
Importance: Undecided
Status: New
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
This bug was fixed in the package openjdk-6 - 6b17-0ubuntu2
---
openjdk-6 (6b17-0ubuntu2) lucid; urgency=low
* implement an execute bit checker for the Ubuntu Non-Exec Policy
(LP: #506702):
- debian/JB-java.desktop.in: update mime handler to use new launcher.
-- Kees Cook
This bug was fixed in the package wine - 1.0.1-0ubuntu10
---
wine (1.0.1-0ubuntu10) lucid; urgency=low
* debian/{control,*.lpia}: removed lpia arch since it is not supported.
* implement an execute bit checker for the Ubuntu Non-Exec Policy
(LP: #506702):
- debian/wine.mim
This bug was fixed in the package mime-support - 3.48-1ubuntu1
---
mime-support (3.48-1ubuntu1) lucid; urgency=low
* Add "cautious-launcher" for handling execution of files that are
outside /usr and /opt (LP: #506702).
-- Kees CookWed, 13 Jan 2010 22:31:40 -0800
** Changed
** Changed in: mime-support (Ubuntu)
Assignee: (unassigned) => Kees Cook (kees)
** Changed in: nautilus (Ubuntu)
Assignee: (unassigned) => Kees Cook (kees)
** Changed in: openjdk-6 (Ubuntu)
Assignee: (unassigned) => Kees Cook (kees)
** Changed in: sun-java6 (Ubuntu)
Assignee:
** Changed in: nautilus (Ubuntu)
Status: Confirmed => In Progress
** Changed in: sun-java6 (Ubuntu)
Status: Confirmed => In Progress
** Changed in: openjdk-6 (Ubuntu)
Status: Confirmed => In Progress
** Changed in: wine (Ubuntu)
Status: Confirmed => In Progress
** Ch
** Also affects: mime-support (Ubuntu)
Importance: Undecided
Status: New
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ub
My first-pass at Wine is here:
http://people.canonical.com/~kees/wine_1.0.1-0ubuntu10.debdiff I intend
to move wine-desktop-launcher into a generic script that will live in
mime-support so that the other packages can call it too.
--
needs to block non-executable files from executing
https://bugs
I have a near implementation of the executable-handler that we discussed
at UDS-Karmic. Java, Wine, et all shouldn't be opening these without
execute bit "permission", however having executable-handler open them
would be an acceptable default as it doesn't actually run them. Right
now the current
The major thing to look for is .desktop files that trigger off of
MimeTypes, yet actually run the target file. For example
/usr/share/applications/openjdk-6-java.desktop:
...
Exec=/usr/lib/jvm/java-6-openjdk/bin/java -jar
...
MimeType=application/x-java-archive;application/java-archive;applicatio
23 matches
Mail list logo
