On Wednesday 06 July 2005 14:16, ghee teo wrote: > Waldo Bastian wrote: > >On Tuesday 05 July 2005 13:40, cobaco (aka Bart Cornelis) wrote: > >>* start/run things on other events then startup > >> - shutdown (obvious extension) > >> - mount of media (see gnome-volume-manager) > > > >When I mentioned autostart at mounting of media, I was referring to the > >execution of a [.autorun|autorun|autorun.sh] executable located on the > > media. > > > >See also http://bugs.kde.org/show_bug.cgi?id=105604 > > > >The gnome-volume-manager does of course much more than that, but I don't > > think that's to be included in an autostart spec for now. > > Do you really want to support autorun feature? It is such a > security nightmare. > Though it may seems nice, but the script could make to do anything, > including wiping out your harddisk, install a trojan horse even before > you realise it. > > CDE on Solarirs used to support it and we had to take it out for this > simple reason.
The user should be prompted whether to run the script/application/trojan. With that in place I don't see how it is different, security wise, from clicking on a setup.sh file. But feel free to convince me otherwise :-) Cheers, Waldo
pgp36MARIW48C.pgp
Description: PGP signature
_______________________________________________ xdg mailing list [email protected] http://lists.freedesktop.org/mailman/listinfo/xdg
