On Sat, 31 Jan 2004 12:34:31 -0500, Andrey Kartashov wrote:
> > > On Sat, Jan 31, 2004 at 12:51:42AM -0500, Andrey Kartashov wrote:
> > > > I'm using blackbox wm and have noticed that the styles don't set
> > > > the root window background because the feature is disabled by
> > > > the 
> > > > 
> > > > epatch ${FILESDIR}/disable_rootcommand.patch
> > > > 
> > > > The warning message says:
> > > > ewarn "RootCommand is now DISABLED to close a large"
> > > > ewarn "security hole."

> IF I were to download random 'style' off the web and apply it, then it
> could be dangerous if someone put a malicious command in.

I'm pretty sure this is the only reason why it is patched out.

> I trust that
> the stuff I get when I 'emerge' package is not going to screw me up.
> When on the other hand I come across some other 'useful' script on
> someone's web page, I read it first before I execute it.

Just because you do that, doesn't mean everybody else does as well.
> I would be perfectly happy if there were a 'USE' flag that turns this
> 'RootCommand' on. This way one would be forced to read about it before
> enabling it and thus learn what the consequences are.

Yeah maybe. By the way, may I suggest you openbox (version 3 and up)
instead of blackbox? It has more deps and the themefile format isn't
compatible to blackbox anymore, but it's pretty fast and looks pretty
similiar to bb AND conforms to freedesktop.org standards. It doesn't
have a RootCommand though. :P If you try it, try obconf as well, to
configure the wm.

[EMAIL PROTECTED] mailing list

Reply via email to