Should this apply to interpreted script files too?
Such as Python, Ruby, and Perl scripts?
--
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in Ubuntu.
https://bugs.launchpad.net/bugs/506702
Title:
needs to block
I think that this fix has just caused a bug on sun java6:
https://bugs.launchpad.net/bugs/568707
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to
er.. sorry, not entirely related :)
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
--
desktop-bugs mailing list
** Branch linked: lp:~voronov84/+junk/sun-java6
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
--
desktop-bugs mailing
Fixed sun-java6 in lucid
** Changed in: sun-java6 (Ubuntu)
Status: Fix Committed = Fix Released
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is
** Changed in: nautilus (Ubuntu)
Status: In Progress = Fix Released
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
** Changed in: sun-java6 (Ubuntu)
Status: In Progress = Fix Committed
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
** Changed in: wine1.2 (Ubuntu)
Importance: Undecided = High
** Changed in: wine1.2 (Ubuntu)
Assignee: (unassigned) = Kees Cook (kees)
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member
This bug was fixed in the package wine1.2 - 1.1.36-0ubuntu2
---
wine1.2 (1.1.36-0ubuntu2) lucid; urgency=low
* Port to Lucid
* Port Kees' changes from wine package:
* debian/{control,*.lpia}: removed lpia arch since it is not supported.
* debian/rules: support parallel=N
** Branch linked: lp:ubuntu/wine1.2
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in ubuntu.
--
desktop-bugs mailing list
** Attachment added: sun-java6_6-16-1ubuntu1.debdiff
http://launchpadlibrarian.net/38089345/sun-java6_6-16-1ubuntu1.debdiff
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
On 19.01.2010 16:46, Kees Cook wrote:
** Attachment added: sun-java6_6-16-1ubuntu1.debdiff
http://launchpadlibrarian.net/38089345/sun-java6_6-16-1ubuntu1.debdiff
having the patch in this form is a major pain for uploads to older releases.
please conditionalize this not to apply for
** Also affects: wine1.2 (Ubuntu)
Importance: Undecided
Status: New
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in
Malicious software in Windows has been known to try getting past simple
file type checks by spreading a zip file containing the actual
executable.
In our case, a user could get a tarball containing an executable with
the +x bit set from a malicious user.
Perhaps make file-roller ask the user
This bug was fixed in the package mime-support - 3.48-1ubuntu1
---
mime-support (3.48-1ubuntu1) lucid; urgency=low
* Add cautious-launcher for handling execution of files that are
outside /usr and /opt (LP: #506702).
-- Kees Cook k...@ubuntu.com Wed, 13 Jan 2010 22:31:40
This bug was fixed in the package wine - 1.0.1-0ubuntu10
---
wine (1.0.1-0ubuntu10) lucid; urgency=low
* debian/{control,*.lpia}: removed lpia arch since it is not supported.
* implement an execute bit checker for the Ubuntu Non-Exec Policy
(LP: #506702):
-
This bug was fixed in the package openjdk-6 - 6b17-0ubuntu2
---
openjdk-6 (6b17-0ubuntu2) lucid; urgency=low
* implement an execute bit checker for the Ubuntu Non-Exec Policy
(LP: #506702):
- debian/JB-java.desktop.in: update mime handler to use new launcher.
-- Kees Cook
** Changed in: mime-support (Ubuntu)
Assignee: (unassigned) = Kees Cook (kees)
** Changed in: nautilus (Ubuntu)
Assignee: (unassigned) = Kees Cook (kees)
** Changed in: openjdk-6 (Ubuntu)
Assignee: (unassigned) = Kees Cook (kees)
** Changed in: sun-java6 (Ubuntu)
Assignee:
** Also affects: mime-support (Ubuntu)
Importance: Undecided
Status: New
--
needs to block non-executable files from executing
https://bugs.launchpad.net/bugs/506702
You received this bug notification because you are a member of Ubuntu
Desktop Bugs, which is subscribed to nautilus in
** Changed in: nautilus (Ubuntu)
Status: Confirmed = In Progress
** Changed in: sun-java6 (Ubuntu)
Status: Confirmed = In Progress
** Changed in: openjdk-6 (Ubuntu)
Status: Confirmed = In Progress
** Changed in: wine (Ubuntu)
Status: Confirmed = In Progress
**
The major thing to look for is .desktop files that trigger off of
MimeTypes, yet actually run the target file. For example
/usr/share/applications/openjdk-6-java.desktop:
...
Exec=/usr/lib/jvm/java-6-openjdk/bin/java -jar
...
I have a near implementation of the executable-handler that we discussed
at UDS-Karmic. Java, Wine, et all shouldn't be opening these without
execute bit permission, however having executable-handler open them
would be an acceptable default as it doesn't actually run them. Right
now the current
My first-pass at Wine is here:
http://people.canonical.com/~kees/wine_1.0.1-0ubuntu10.debdiff I intend
to move wine-desktop-launcher into a generic script that will live in
mime-support so that the other packages can call it too.
--
needs to block non-executable files from executing
23 matches
Mail list logo
